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IT PROS PREPARE AS 


WAR IN INDIA LOOMS 


U.S. firms reviewing contingency plans of 


BY JAIKUMAR VIJAYAN 
AND THOMAS HOFFMAN 
The escalating tension be- 
tween India and Pakistan is 
prompting U.S. outsourcing 
clients to review the disaster 
preparedness of soft- 
ware development firms 
in both countries. 


aspects such as the de- 

velopers’ network redundancy, 
their access to backup commu- 
nications circuits, 


and their ability to quickly 
move key personnel and pro- 


WORLD 
The scrutiny covers WATCH 


their sys- | 
tems documentation practices | 


| rope and North America. 


There is no indication that | 


| the situation has caused any 
| major U.S. corporations to pull 
| 


out of projects in the region, | 


analysts and vendors 
said. But they’re putting 
contingency plans in 
place. 

“We are critically 
concerned, especially by the 
nature of the conversation re- 
garding the use of nuclear 
weapons,” said Jim Beattie, 
| chief technology officer at 
| CCC Information 


FEDS EYE HUGE SMART-CARD ROLLOUT 


NEWSPAPER 


Use may spur adoption 
by private- sector firms 


BY PATRICK THIBODEAU 
WASHINGTON 


The federal government plans 


to deploy tens of millions of | 
biometric-enabled smart cards | 


over the next few years. The 
resulting economies of scale 
could lower product costs in 
the private sector, increase ap- 


plication development and im- | 


prove card interoperability. 
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SCOTT KAMPMUELLER 


that won strong endorsement 
from the White House last 
| week. 


The biggest end user will be | 
the new federal Transportation | 


Security Administration. De- 


pending on how much Con- | 
the | 
agency will issue between 10 | 
and 15 million smart | 


gress decides to spend, 


million 
cards to air, rail, sea and high- | 
way transportation workers | 
over the next three years. 
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| Inc., 
| that provides IT services to the | 
| automotive claims 


offshore software development companies | 


| cesses to safer locations in Eu- 


Services | 
| AND MICHAEL 


| data, 
It’s a technology direction 


a Chicago-based company 


ccc 
application development proj- 
ect in India with Cognizant 
Technology Solutions Inc., a 
Teaneck, NJ.-based 
with operations in that nation. 


Offshore, page 16 | 


BIG RETAILERS 
PUSH DATA TIES 


But suppliers may need 


to revamp their systems 


BY BRIAN SULLIVAN 
MEEHAN 


| Looking to increase the elec- | 
product | 
than | 


tronic exchange of 
a group of more 
20 top retailers, supermarket 
chains and consumer goods 
manufacturers is pushing com- 


| panies in those industries to 
adopt a common set of data | 
synchronization standards and | 
| technology by year’s end. 


The group includes retail 


heavyweight Wal-Mart Stores | 
which in April notified its | 


Inc., 
Data Ties, page 61 


WAL-MART AND OTHERS ARE SEEKING: 


THE ADOPTION of data syn- 
chronization standards 


THE USE of UCCnet’s product 


data registry service by at least 
600 companies 


line exchanges 


and colli- | 
| sion-repair industries. | 
is working on a joint | 


vendor | 
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The Jolt 


IT Re-enereizes 


California Utilities 


California’s crippling energy crisis of 2000 
and 2001 has finally stabilized, letting util- 
ity company IT leaders such as Southern 
California Edison CIO Mahvash Yazdi 
(above) start looking beyond the present. 
Using approaches that require both fiscally 
conservative and ambitious investments, 
they’re focusing on some big projects, in- 
cluding long-overdue updates of key sys- 
tems and processes. The goal: to best posi- 
tion their companies to deal with an uncer- 
tain future. 

STORY BEGINS ON PAGE 24. 





“There is no reason 
for any individual 
to have acomputer | 
in their home.” 


“640K ought ! 
to be enough — 
for anybody.” 


“Portal, 
schmortal.” 


a ett satires 


2002 


(Pooh-pooh it now, while you still can.) 





Welcome skeptics, cynics, and naysayers. 


Every major innovation in technology has initially been met with more than a little resistance. And portal technol 
is no different. But, like the other innovations, today’s curiosity is well on its way to be ng tomorrow’s neces 
| 


Why? Because, quite simply, CleverPath™ Portal and Business Intelligence solutions from CA let you work smarter 


more efficiently than ever before. Not tomorrow. Not someday. Right now 


Work faster. Work smarter. Work together. You'd be surprised how much simpler doi 

be with the right tools. CleverPath Portal is designed to be highly intuitive, so you can aq 

exactly what you need. It delivers real-time sales data, email, and inventory-level indicators 

open and close multiple applications every time. Legacy systems, mainframes, desktops, Web Services 
Jevices are now seamlessly integrated, so you can access a vast breadth of information from anywhere 
from one single, secure portal. You can also rely on it to automate your business processe 


you now waste trying to get the right information into the right hands. And, than 


tools, over time, it can learn your preferences and deliver them before you even ask 


CleverPath 


Portal and Business Intelligence Solutions 


Start working now. 


The CleverPath Portal “deploy first, customize later” model means 

systems in days or weeks, delivering tangible RO! almost imme: 

other ways. CleverPath Portal delivers a high degree of scalability in the real world 
users. And flexible licensing means you can select the payment and licensing options 


business needs, whatever they may be 


The CleverPath family at work. 


CleverPath is more than just a single portal 


product. It 

of unified portal and business intelligence solutions 

unique, online analytical alysis, reporting, dashboard developr 

yusiness rules automation, predictive analysis, and vist 
And that means delivery of the right informat 

right people at the right time—all in a personalized way 


another day without tapping into the true value of yo nterprise Computer Associates™ 


Go to ca.com/cleverpath/portal and find out more now. 


HELLO TOMORROW WE ARE COMPUTER ASSOCIATES THE SOFTWARE THAT MANAGES eBUSINESS 
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Storage in every size and width. 


| losing is a little thing 


ice between winning and 
‘storage.’ And the winning play is integrated storage solutions. Why? 
Hardware and software that work together speed implementation, 
let you maximize your current infrastructure investments, and help 
reduce risk. IBM TotalStorage” solutions are complete, cross-platform 
storage offerings that cover storage networking, disk, tape, software 
and services. Bent on winning? Find out where you can test-drive 


any IBM storage solution at ibm.com/totalstorage/solutions 


(© business is the game. Play twin” 





LOFTY TITLE, LITTLE POWER 


Chief security officers may have attained 

a chief-level title, but they have little else 
to show for it. The departures of top CSOs 
such as Steve Katz (left), formerly of Mer- 
rill Lynch, indicate the problems some 

of them are facing, even in the wake of 
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6 SAP promises users at its Sap- 
phire event that it will make its 
software cheaper and easier to use. 


7 United Technology says a $4.5 
billion IT infrastructure overhaul 
will save the company $1 billion 
over the next 15 years. 


10 Microsoft details technology 

plans aimed at giving users single 
sign-on access to information and 
applications outside of their own 

companies. 


12 Wall Street firms band together 
to create a database to comply with 
new antiterrorism regulations for 
screening out suspected criminals. 


14 Hewlett-Packard outlines 
a postmerger restructuring of 
its 65,000-person global IT 
consulting services business. 
For breaking news, updated twice daily, visit 


QuickLink: a1510 
www.computerworld.com 


ENTERPRISES ADDING 
OPEN SOURCE 10 MIX 


Corporate developers have quietly 
begun to use a host of open-source 
tools and products to build critical 
applications for businesses. PAGE 46 
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BUSINESS «=. 23—s TECHNOLOGY 41 


23 Bart Perkins writes that 
having a disciplined process to 
guide IT purchasing can save you 
money. But, more important, it can 
help simplify your corporate IT 
architecture. 


30 Wanna make a better out- 
sourcing deal? A tough economy 
and tight IT budgets are helping 
users and vendors give fixed 
contracts the boot in favor of 
incentive-based pricing models. 


38 Workstyles: A business-casual 


atmosphere and the ability to move 


from technology to the business 
side and back are hallmarks of the 
culture at The Scotts Co., the gar- 
den and lawn care products firm 


39 Career Adviser Fran Quittel 
offers advice to a networking man- 
ager who wants to know what’s in 
a title, and to an IT worker whose 
company has delayed salary re- 
views and is offering stock options 
instead. 


41 Nicholas Petreley dissects 
software license agreements and 
what they really mean to users. 


42 How are Computerworld’s 
Emerging Companies to Watch in 
2002 doing seven months after 
they were named to the list? Learn 
which ones are thriving and which 
are struggling to survive. 


49 Future Watch: Scientists want 
to build a virtual human being. Its 
body parts would be distributed 
among labs around the world, but 
it would work as a single being. 


52 QuickStudy: Steganography 

is the hiding of information with- 
in a more obvious kind of com- 
munication, such as an image 

or sound file. 


54 Security Manager’s Journal: 
A Web-enabled PeopleSoft imple- 
mentation is put to the test when 
Mathias Thurman assembles his 
penetration-testing tools. 


co 
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et python x 
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cal 


TRAINED AT BREAST A AIO A at BEI 


OPINIONS 20 


) Patricia Keefe writes that if 
you want to keep your users’ trust, 
start by re-examining your ap- 
proach to one of IT’s biggest stum- 
bling blocks: project management. 


Pimm Fox says the ASP model 
s reaping big dividends in building 
trades industries. Who says the 
Internet doesn’t pay off? 


David Moschella thinks that 
disagreements between the U.S. 
and the European Union over tech- 
nology issues could have serious 
implications, especially in the area 
of global technological progress. 


Frank Hayes says a letter from 
Ralph Nader to the White House 
and a white paper by a Microsoft- 
funded think tank don’t get to the 
heart of the matter on the use of 
open-source software. 
Editorial/Letters 20, 21 
How to Contact CW 60 
Company Index 60 
Shark Tank 62 
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NEWS IN YOUR IN-BOX 


Sign up for our free daily and week 
ly e-mail newsletters, and you'll be 
sure not to miss any of the IT news 
you need. 


QuickLink: ai430 


WILL THE FEDS 
LISTEN TO NADER? 


Computerworld community mem 
bers weigh in on consumer activist 
Ralph Nader's suggestion to the 
White House that the government 
can keep Microsoft in line by adopt 
ing open-source software. 


QuickLink: a2160 


HIDDEN DATA 


After reading this week’s Quick 
Study about hiding sensitive infor 
mation in innocent-looking image 
files, head to our Web site for links 
to some useful steganography tools. 


QuickLink: 30130 


WHAT'S A QUICKLINK? 


On some pages in this issue 

you'll see a QuickLink code 
pointing to additional, related con 
tent on our Web site. Just enter that 
code into our QuickL ink box online, 
which you'll see at the top of each 
page on our site. 


Use QuickLinks to see related sto- 
ries, discussion forums, research 
links, archives and more. 
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Intel Drops Q2 
Revenue Forecast 


Intel Corp. lowered its revenue esti- 
mate for the quarter ending June 
29, blaming soft sales of micro- 
processors used in desktop PCs, 

as well as sluggish demand for 
chips in Europe. The company said 
it expects revenue of $6.2 billion to 
$6.5 billion, down from earlier fore- 
casts of $6.4 billion to $7 billion. 
Intel expects better results in the 
second half of the year. 


IBM Offers Remote 
Web Server Hosting 


IBM's IT services unit announced an 
off-site Web hosting program under 
which it will remotely manage 
servers located in corporate data 
centers. The new service is aimed at 
companies that have 30 to 1,000 
Web servers and that don’t want to 
move the systems to an IBM facility. 


Servers will be linked to IBM hosting | 


facilities via virtual private network 
connections, the company said. 


Deloitte Consulting 
Set to Be Spun Off 


Deloitte Consulting, the IT and man- | 


agement consulting arm of New 
York-based accounting firm Deloitte 
Touche Tohmatsu, said it expects to 
become a separate, privately held 
company by year’s end. A merger 
or sale has been ruled out, said De- 
loitte Consulting, which will change 
its name after the split takes place. 


Nortel Expects Stock 
Sales to Net $1.3B 


Nortel Networks Ltd. said it expects 
to raise $1.3 billion in U.S. currency 
through a pair of public stock and 
equity offerings. The Brampton, 
Ontario-based company, which is 
struggling for sales along with other 
telecommunications equipment ven- 
dors, said the projected proceeds 
are about $500 million more than 

it initially anticipated. 
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SAP to Simplify, 
Streamline Apps 


Vendor will remove unneeded features, 
make products easier to use and install 


BY MARC L. SONGINI 
ORLANDO 
OOKING TO ADDRESS 
some longtime user 
concerns about its 
business applica- 
tions, SAP AG is 
pushing to make its software 
faster, easier to use, cheaper to 
operate and less complex for 
small and midsize companies. 
At its Sapphire ’02 user con- 
ference here last week, SAP 
detailed a series of upcoming 
products and planned applica- 


| tion changes designed to sim- 


plify installation, use and man- 
agement of the software (see 
chart). 

For example, SAP CEO Hasso 
Plattner said during a keynote 
speech that with input from 
users, the company plans to 
prune up to 50% of the features 
from its application suite be- 
cause they’re now obsolete. 
That should boost the soft- 
ware’s performance and lower 





its total cost of ownership, ac- 
cording to Plattner. 

He also said that SAP will re- 
place the user interfaces in 
many of its applications with 
new ones built around the 
company’s browser-based and 
platform-independent Web 
Dynpro technology. Those 
changes will come with the 
next version of SAP’s custo- 
mer relationship management 
(CRM) software, which was 
announced last week and is 
due in September. 

The simplification plan isn’t 
an entirely new tack for SAP, 
which has been working for 
the past four years to make its 
software easier to use. None- 
theless, several IT managers 
who are trying to deal with the 
complexity of the applications 
said the company’s plans are a 
step in the right direction. 

Gary Coleman, vice presi- 
dent of information systems 


at the aerospace division of | 


Rollouts Include ‘Cross Applications’ 


In addition to its CRM software up- 
grade, SAP last week announced 
plans to develop a set of “cross 
applications” that will work with its 
own software as well as with prod- 
ucts from rival vendors such as Or- 
acle Corp. and PeopleSoft Inc. 

SAP said 1:2 component- 
based technology is aimed at 
automating processes such as 
real-time collaboration and data- 
sharing between companies. The 
first product, due in the fourth 
quarter, will support project man- 
agement activities. 

Bruce Richardson, an analyst at 
AMR Research inc. in Boston, said 
the cross-applications concept is 
long overdue and should give 
users a way to layer new applica- 


tions on top of existing enterprise 
resource planning systems. 

Other products announced at 
Sapphire included SAP Business 
One, a set of applications aimed 
at small and midsize companies. 
The software, also scheduled for 
release in the U.S. in the fourth 
quarter, is based on technology 
SAP acquired from Israeli vendor 
TopManage Financial Solutions 
Ltd. in March. 

SAP is squaring off in that part 
of the market with Microsoft 
Corp., which last month agreed to 
buy Navision A/S in Denmark 
[QuickLink: 29602]. SAP said 
support for exchanging data be- 
tween SAP Business One and its 
applications for larger companies 





Goodrich Corp. in Charlotte, 
N.C., said the quality of SAP’s 
flagship R/3 enterprise re- 
source planning software is 
high. But he added that SAP 
needs to make its technology 
friendlier, especially for users 
at smaller companies. 

The aerospace unit went live 
with R/3 in January after a rel- 
atively smooth 14-month im- 
plementation that retired 237 
legacy applications, Coleman 
said. But he noted that some 
smaller Goodrich operations 
are hesitant about R/3. Con- 
vincing them to adopt the soft- 
ware “will be more challenging 
and place more emphasis on 
managing the total costs of 
ownership,” he said. 


Implementation Hurdles 

Jenny Trautman, director of 
IT at Atlanta-based Cox News- 
papers Inc., said the company 
is rolling out SAP’s application 
bundle for media companies 
on a test basis. The publisher 
plans to go live with R/3’s hu- 
man resources module next 
month, but Trautman said 
there are two hurdles to selling 


is due in the fourth quarter. 

SAP also announced collabo- 
rative project management soft- 
ware and said a promised up- 
grade of its Web application serv- 
er with built-in Java support is 
now available. In addition, the 
company said it will work with 
San Jose-based Adobe Systems 
Inc. to integrate that company's 
document management software 
with the mySAP.com suite. 

Jay Wilson, CIO at prefabricat- 
ed and mobile home manufactur- 
er Cavalier Homes Inc. in Addi- 
son, Ala., said the Adobe support 
would make it easier for the com- 
pany's online mortgage opera- 
tions to process legal documents. 
Cavalier runs R/3's finance, distri- 
bution and materials manage- 
ment modules. 

~ Marc L. Songini 
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the project internally: cost and 
complexity. 

Cox is highly decentralized, 
and Trautman said some of its 
business units are worried 
about the potential difficulty 
of installing the software. “Var- 
ious parties said, ‘It’s so com- 
plicated that we're afraid to put 
it in, ” she said. 

Other users and analysts 
noted that SAP’s software can 
be particularly complex for ca- 
sual users who don’t want to 
master its nuances or navigate 
through multiple screens to 
process transactions. 

Tom Ackerman, senior di- 
rector of business information 
systems at Symbol Technolo- 
gies Inc., said the Holtsville, 
N.Y.-based maker of bar code 
scanners and other handheld 
devices spent nine months 
configuring SAP’s mobile sales 
module, partly to “dumb 
down” the software for users. 

“We had to keep it simple 
and mask the complex ele- 
ments,” Ackerman said. Other- 
wise, he added, the company’s 
sales staff likely wouldn’t use 
the software. D 


APPLICATION-AWARE = 


For more coverage of business appli- 

Cations, head to our Supply Chain/ERP 

Knowledge Center 

e QuickLink: k2000 
computerworld.com 
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United Technologies in $4.8 


Changes include standardizing systems 
and networks, reducing servers and apps 


BY LUCAS MEARIAN 
United Technologies Corp. 
(UTC) announced last week 
that it is undergoing a com- 
plete IT infrastructure over- 
haul and consolidation that 
will cost $4.5 billion but will 
save the company $1 billion 
through efficiencies over the 
next 15 years. 

The project, which UTC has 
outsourced to Computer Sci- 
ences Corp. (CSC) in El Segun- 
do, Calif, includes changing 
out 45,000 PCs, standardizing 
on a single backup-and-recov- 
ery platform and consolidating 
the business-critical work- 
loads in 20 major data centers 
into three. The majority of the 
work is expected to be com- 
pleted by the end of the year. 

Most recently, CSC helped 
the Hartford, Conn.-based con- 
glomerate standardized 
North American data centers 
on Mountain View, Calif.-based 
Veritas Software Corp.’s Net- 
Backup storage software utility. 
The suite gives UTC autodis- 
covery features and centralized 
and remote management capa- 
bilities. The company had been 
using a variety of point prod- 
ucts for backup and manage- 
ment services that occasionally 
lost mission-critical data. 

“Before, we were dealing 
with backups occurring hap- 
hazardly, depending upon 
where a device Now 
every critical system will have 
a disaster recovery plan,” said 
UTC CIO John Doucette. 

Bob Zimmerman, an analyst 
at Giga Information Group Inc. 
in Santa Clara, Calif., said that 
many companies that are con- 
solidating IT systems are dis- 
covering that their old backup 
systems don’t work. 

Zimmerman noted that Ver- 
itas’ NetBackup product tends 
to be the priciest among those 
in its class, but it’s also the eas- 
iest to configure. 

UTC’s companies, which in- 
clude Pratt & Whitney, Hamil- 
ton Sundstrand Corp., Sikorsky 


its 


was. 


| Otis 


Aircraft Corp., Carrier Corp., 
Elevator Co. and UTC 
Fuel Cells, had been operating 


| out of data centers running on 


| $28 billion 


| among 


proprietary platforms. 

After decades of growth, the 
company’s data 
centers and server farms were 
dispersed throughout the U.S. 
Its eight mainframes, 11 IBM 
AS/400 servers and 2,950 other 
servers were also dispersed 
those data centers. 
Since having consolidated 
them into a mirrored data cen- 


ter on its Pratt & Whitney 
| campus in East Hartford and 


two other data centers owned 


| our 


NEWS | 


IT Overhaul 


by CSC in Meriden, Conn., and 
Norwich, Conn., the company 
needs only mainframes 
and two AS/400 systems. It ex- 
pects to drop about 350 servers 
by the end of the year. 

“We identified 160,000 pieces 
of software and probably end- 


two 


| ed up putting 5,000 pieces of 


software back,” Doucette said. 
“The other thing we did with 
PCs them 
down. People can’t go out on 
the Internet and download soft- 


was to lock 


| ware onto them. There’s just 


tons of inefficiencies with that.” 
UTC is creating two storage- 


area networks, also to be locat- 


ed on the East Hartford cam- 
pus, that will run off of Hitachi 
Data Systems Corp. Freedom 
Storage 9900 and EMC Corp. 
Symmetrix RAID boxes. 


UCITA Backers Hatch New 
Plans for Adoption Push 


| But opposition to 


law is still strong 


BY PATRICK THIBODEAU 
WASHINGTON 

David Lewis isn’t a lawyer or a 
politician. But that didn’t keep 
him from preventing UCITA 
from being introduced in the 
Utah state legislature. 

And the CIO at Deseret Mu- 
tual Benefit Administrators in 
Salt Lake City has a message 
for IT managers concerned 
about this software licensing 
law. “One thing I have learned 
in this process is that it doesn’t 
take very many voices to have 


| an influence,” said Lewis. 


| 
| 
| 
| 
| 
| 


The Uniform Computer In- 
formation ‘Transactions Act 
wasn't passed in any state this 
year because of vocal opposi- 
tion and a decision by its 
drafters not to press for adop- 
tion until some changes were 
made to it. Those proposed 
changes were finalized late 
last month. 

If the changes win approval 


at the National Conference of 
Commissioners on Uniform 
State Laws’ (NCCUSL) annual 
meeting beginning July 26, 
UCITA will be ready for a 
new push for acceptance. The 


| Chicago-based group develops 


uniform commercial laws for 
state-by-state adoption. 

If opposition “remains vocif- 
erous and widespread, we will 
have problems with UCITA,” 
said John McCabe, legislative 


| director of the NCCUSL. But if 


the proposed changes can mol- 
lify some opponents, he added, 
“then this may have some op- 
portunities. But have to 
wait and see.” 


we 


Cautious Optimism 

Proponents acknowledge 
that they can’t satisfy everyone 
but said that they hope the 
changes to the proposed law 


can peel away some opponents. 


The changes that represent 
the most significant potential 


| consequences for IT were of- 


fered earlier this year. Those | 
include the elimination of a | 


provision that would allow 


The company is also stan- 
dardizing its network on Com- 
puter Associates International 
Inc.’s Unicenter TNG manage- 
ment tool. In another move, 
UTC consolidated 15 help desks 
running nine applications into 
one center running one system. 

Henning Kerger, director of 
transformation for CSC’s UTC 
account, CSC site in 
Newington, Conn., will be used 
for UTC’s Web hosting facility. 

“The biggest challenge was 
to get away from a disparate 
situation, where busi- 
ness unit was unique and had 
its own standards and quality 


said a 


every 


| of people varying from unit to 


unit,” Kerger said. 

For example, UTC found it- 
self with multiple PC platforms. 
While it had considered chang- 
ing out 20% of its workstations 
and platforms each year, Dou- 
cette said that would have made 


vendors to remotely shut down 
systems in a contract dispute, 
as weil as one that would allow 
reverse-engineering for inter- 
operability, which was previ- 
ously banned. 

But following the release of 
those initial changes, the Soci- 
ety for Information Manage- 
ment said UCITA remains too 
flawed to support. The Chicago- 
based organization has some 


| 2,600 members, many of whom 
| are senior IT managers. 


Two years ago, Lewis met 
with the president of the Utah 
Senate to discuss UCITA. Also 
at that meeting was a !awyer 
from a software company, ad- 
vocating UCITA. Lewis be- 


Awe 


Round 2? 


| WHAT'S NEW: In response to oppo- 


nents, the UCITA drafters made some 
changes and added consumer-protec- 
tion language. But drafters rejected 


| recommendations such as one that 


would require a license to be made 
available before a licensee pays or is 
obligated to do so. 


years to win state adoption; UCITA’s 


backers are in it for the long haul. 


WHAT'S NEXT: Once the changes t 
UCITA are incorporated, expect a new 


| push for states’ adoption of the act. 


it more difficult to standardize. 

The company has completed 
about 95% of a changeover to 
Dell Computer Corp. PCs run- 
ning Windows 2000 and Office 
2000. Doucette said that along 
with the remote control of sys- 
tems, that’s “the biggest part of 
reducing cost.” D 


UTC Transformed 


Changing out 45,000 PCs 
CUS eRe gin) 
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Cee OR Ue-1) 
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Standardizing on a single 
backup-and-recovery platform 


Standardizing on a network 
management platform 


lieves that as a result of his in- 
volvement, the Senate presi- 
dent was able to understand 
the depth of the controversy. 
“You don’t need a legal mind to 
understand this is a very one- 
sided law,” said Lewis. 

The president told both sides 
to work out their differences. 

UCITA sets default rules for 
software licensing. Vendors 
support the act, but it’s op- 
posed by a coalition of end 
users, library and consumer 
groups, and 32 state attorneys 
general, who say the law gives 
vendors too much power on 
contracts. This active opposi- 
tion has succeeded in limiting 
UCITA’s adoption to only two 
states, Virginia and Maryland. 

The latest amend- 
ments are in response to a Feb- 
ruary report by a committee of 
the Chicago-based American 
Bar Association that cited nu- 
merous problems with UCITA 
and called for a rewrite. 

Carol Ashworth, who's head- 
ing an anti-UCITA effort at the 
American Library Associa- 
tion’s office in Washington, 
said she saw little in the changes 
to convince her that the pro- 
posed law has been reformed. 

“There is some tweaking 
that is going on, but substan- 
tively, there haven’t been any 
real changes,” said Ashworth. D 


set of 





Intel Drops Q2 
Revenue Forecast 


Intel Corp. lowered its revenue esti- 
mate for the quarter ending June 
29, blaming soft sales of micro- 
processors used in desktop PCs, 

as well as sluggish demand for 
chips in Europe. The company said 
it expects revenue of $6.2 billion to 
$6.5 billion, down from earlier fore- 
casts of $6.4 billion to $7 billion. 
Intel expects better results in the 
second half of the year. 


IBM Offers Remote 
Web Server Hosting 


IBM's IT services unit announced an 
off-site Web hosting program under 
which it will remotely manage 
servers located in corporate data 
centers. The new service is aimed at 
companies that have 30 to 1,000 
Web servers and that don’t want to 
move the systems to an IBM facility. 
Servers will be linked to IBM hosting 
facilities via virtual private network 
connections, the company said. 


Deloitte Consulting 
Set to Be Spun Off 


Deloitte Consulting, the IT and man- 
agement consulting arm of New 
York-based accounting firm Deloitte 
Touche Tohmatsu, said it expects to 
become a separate, privately held 
company by year’s end. A merger 

or sale has been ruled out, said De- 
loitte Consulting, which will change 
its name after the split takes place 


Nortel Expects Stock 
Sales to Net $1.38 


Nortel Networks Ltd. said it expects 
to raise $1.3 billion in U.S. currency 
through a pair of public stock and 
equity offerings. The Brampton, 
Ontario-based company, which is 
struggling for sales along with other 
telecommunications equipment ven- 
dors, said the projected proceeds 
are about $500 million more than 

it initially anticipated. 


SAP to Simplify, 
Streamline Apps 


Vendor will remove unneeded features, 
make products easier to use and install 


BY MARC L. SONGINI 


OOKING TO DRI 
some longtime user 
concerns about. its 
} 


business applica 
SAP AG is 


pushing to make its 


tions 
software 
faster, easier to use, Cheaper to 


operate and less complex for 
small and midsize companies 
At its Sapphire ‘02 


last 


user con 
SAP 


upcoming 


ference week, 


detailed a series of 


products and planned applica 


tion changes designed to sim 


plity installation, use and man 


wement of the software (see 


chart) 


For example, SAP CEO Hasso 


Plattner said during a keynot« 


speech that with from 


input 


users, the company plans to 


prune up to 50° of the features 


from its application suite be 


cause they're now. obsolete 


Phat 


ware’s performance and lower 


should boost the soft 


its total cost of ownership, ac 
cording to Plattner 

He also said that SAP will re 
place the user interfaces in 
many of its applications with 
new ones built around the 
company’s browser-based and 


Web 


Chose 


platform-independent 
Dynpro technology 
come wl the 
SAP’s 
mer relationship management 


(CRM) 


announced 


changes will 


next version of custo 


software, which was 


last week and is 
due in September 

Che simplification plan isn't 
SAP, 


working for 


in entirely new tack for 
h 


which has been 
} 


t to make its 


None 


managers 


le past four years 
software easier to use 
theless, several I'l 
who are trying to deal with the 
complexity of the applications 
said the company’s plans are a 
step in the right direction 
Coleman, vice 


Gary presi 


dent of information system 


at the aerospace division of 


Goodrich Corp. in Charlotte, 


N.C., said the quality of SAP’s 
flagshiy R/3 enterprise re 
source planning software is 
he added that SAP 


its technology 


high. But 
needs to make 
friendlier, especially for users 
it smaller companies. 

Che aerospace unit went live 
with R/3 in January after a rel 
atively 14-month im 
plementation that retired 237 


smooth 


legacy applications, Coleman 


said. But he noted that some 


smaller Goodrich operations 


are hesitant about R/3. Con 
vincing them to adopt the soft 
ware “will be more challenging 
and place more emphasis on 
total 


managing the costs of 


ownership,” he said 


Implementation Hurdles 
Jenny 
IT at Atlanta-based Cox News 


papers Inc., 


lrautman, director of 


said the company 
is rolling out SAP’s application 
media 


bundle for companies 


on a test basis. The publisher 


plans to go live with R/3’s hu 


man resources module next 


month, but Trautman said 


there are two hurdles to selling 


Rollouts Include ‘Cross Applications’ 


In addition to its CRM software up 
SAP last week announced 


plans to develop a set of “cross 


grade 
applications” that will work with its 
own software as well as with prod 
ucts from rival vendors such as Or 
acle Corp. and PeopleSoft Inc 

SAP said the component 
based technology is aimed at 
automating processes such as 
real-time collaboration and data 
sharing between companies. The 
first product, due in the fourth 
quarter, will support project man 
agement activities 

Bruce Richardson, an analyst at 
AMR Research Inc. in Boston, said 
he cross-applications concept is 
long overdue and should give 
users a way to layer new applica 


tions on top of existing enterprise 
resource planning systems 

Other products announced at 
Sapphire included SAP Business 
One, a set of applications aimed 
at small and midsize companies 
The software, also scheduled for 
release in the U.S. in the fourth 
quarter, is based on technology 
SAP acquired from Israeli vendor 
TopManage Financial Solutions 

td. in Marct 

SAP is squaring off in that part 
of the market with Microsoft 
Corp., which last month agreed tc 
buy Navision A/S in Denmark 
[QuickLink: 29602]. SAP said 
support for exchanging data be 
tween SAP Business One and its 
applications for larger companies 


due in the fourth quarter 
SAP also announced collabo 
rative project management soft 
ware and Said a promised up 
grade of its Web application serv 
er with built-in Java support is 
now available. In addition, the 
company said it will work with 
San Jose-based Adobe Systems 
Inc. to integrate that company’s 
document management software 
with the mySAP.com suite 
Jay Wilson, CIO at prefabricat 
ed and mobile home manufactur 
er Cavalier Homes Inc. in Addi 
on, Ala., said the Adobe support 
would make it easier for the com 
pany’s online mortgage opera 
tions to process legal documents 
Cavalier runs R/3's finance, distri 
bution and materials manage 
ment modules 
Marc L. Songini 
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SA eA SIE ERBN IESE et. 
Coming Soon 
SAP made the following 


announcements at its 
Sapphire user conference: 


of its CRM software 

is due this fail. tt will have a new 
role-based user interface that will 
later be deployed in other SAP 
applications. 

aset of 
applications that’s tailored for 
due in the fourth quarter. 


are 
being developed for midsize 
panies that have more sophisticat- 


the project internally: cost and 
complexity. 

Cox is highly decentralized, 
and ‘Trautman said some of its 


business units are worried 


about the potential difficulty 
of installing the software. “Var 
ious parties said, ‘It’s so com 
plicated that we're afraid to put 
itin,’ ” she said. 


Other users and analysts 


noted that SAP's software can 
be particularly complex for ca 
sual users who don’t want to 
master its nuances or navigate 
through multiple screens to 
process transactions. 

fom Ackerman, senior di 
rector of business information 
Symbol ‘Technolo 
Inc., said the Holtsville 
N.Y.-based maker of bar 


handheld 


systems at 
ies 
code 
scanners and other 


devices spent nine months 
configuring SAP’s mobile sales 
module, partly to “dumb 
down” the software for users 
“We had to keep it simple 
and mask the complex ele 
ments,” Ackerman said. Other 
wise, he added, the company’s 
sales staff likely wouldn’t use 


APPLICATION-AWARE 


QuickLink: k2000 
computerworld.com 
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United Technologies in $4.58 IT Overhaul 


\ ¢ OI 


Changes include standardizing systems Norwich, ¢ 
and networks, reducing servers and apps |. 


BY LUCAS MEARIAN 


Phe project, whicl 
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out 45,000 PCs, star 
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on Mountai 


lans for Adoption Push 


Veritas Softwa orp.’s Net N Conferem 


But opposition to Cor 


Backup storage software utility 
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law is still strong 


BY PATRICK THIBODEAU 
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Round 2? 

WHAT'S NEW: In response to oppo- 
nents, the UCITA drafters made some 
changes and added consumer-protec- 
tion language. But drafters rejected 
recommendations such as one that 
would require a license to be made 
available before a licensee pays or is 
obligated to do so 


THE OUTLOOK: Uniform laws can take 
years to win state adoption; UCITA’s 
backers are in it for the long haul 


WHAT'S NEXT: Once the changes to 
UCITA are incorporated, expect a new 
push for states’ adoption of the act 


PM els iegii st 


UTC’s outsourcing deal 
with CSC includes: 


= Changing out 45,000 PCs 
on disparate platforms 

= Consolidating 20 data 
centers into three 


= Creating two mirrored 
BS Ole oer Ue Ml Sy 


Bureau Ree esr) 
eve terme am Lia) 


PR era rauR eM | 
PU ee 





~ WEWSCON 
The Best of the Best 


Computerworld honors pioneers and 
innovative projects in IT at gala event 


BY BOB BREWIN 
WASHIN N 

COLLABORATIVE | year’s terrorist attacks, and a 

effort to harness | transnational effort to provide 
the power of PCs | computer-based education to 
to listen for faint | 15 African countries were 
among the 10 IT projects se- 
week 


signals from the | 
far reaches of the univers | lected for recognition la 


Web site dedicated to peac 


vy KF vey 
\ ‘ ‘ 


IDG Chairman Patrick McGovern 
salutes the heroes of global IT. 


Maryfran Johnson, Computer- 
world’s editor in chief 


| as part of the annual Compu- | 


terworld Honors program. 
Patrick J. McGovern, chair- 


| man of International Data | 
| Group, Computerworld’s parent | 
| company, said the people be- | 
| and designed to help children | 
| deal with the aftermath of last | 


hind these projects harnessed 


their passions to the power of | 


technology in ways that can 


| change the world, dubbing 


these pioneers “the new he- 
roes” of the global IT industry. 

At a gala dinner at the Na- 
tional Building Museum here, 
McGovern said the 
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| SOME OF THE WINNERS... 


ments of the individuals and 

organizations selected for in- 

clusion in the Honors program 

over the years have been ar- | 
chived at 140 universities and 
research institutions world- 

wide and on Web sites that have 

received 800 million hits. D 

Idit Harel, MaMaMedia Inc. 


| AND THE WINNERS ARE... | 


| For acomplete list of Computerworld 


Honors program winners, visit our Web site: 


QuickLink: 30296 


achieve- | 


www.computerworld.com 


Theodore Ahlers, African Virtual 
University 


Vinton G. Cerf, WorldCom Inc. 


Lisa Henley, Oklahoma Department 
of Human Services 


Agilent Technologies Inc. ClO 
Marty Chuck (above) and other 
honorees at the Computerworld 
gala celebrate creative new ways 
of applying technology to real- 
world situations. 





A box that delivers paper documents anywhere overnight? 
Or a box that delivers them instantly over the internet? 


imageRUNNER 


The Canon imageRUNNER with document distribution technology. 
You can send paper documents anywhere, in any form, at anytime, right over your network or the internet. 
instantaneously. Simply scan a document into the imageRUNNER 5000, and you can send it to any desktop, 
e-mail address, fax machine, database or file server. And since the Canon imageRUNNER is capable of 
integrating directly with your existing e-mail, lanfax, and document management software, you can 
maximize your investment in these systems*. The cost and hassle of overnight delivery are finally over. 
At Canon, we’re giving people the know-how to make paper documents work in an internet world. 
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Call 1-866-25-CANON or visit www.imagerunner.com  S all On K N OW H OW . 








Unisys, Post Office 
Settle Y2k Claims 


The U.S. Postal Service said that 
Unisys Corp. agreed to pay about 
$900,000 to settle Y2k-related 
overbilling claims. The dispute 
involved systems remediation work 
done by unqualified workers or not 
performed as required, the Postal 
Service said. Blue Bell, Pa.-based 
Unisys declined to comment. 


Sun Patches Two 
Holes in Solaris 


Sun Microsystems Inc. issued a 
software patch to plug a pair of 
security holes that could be used 

to gain root-level access to servers 
running three versions of its Solaris 
operating system. Sun said the vul- 
nerabilities were discovered in Sim- 
ple Network Management Protocol 
agents in Solaris 2.6, 7 and 8. Sys- 
tems are only vulnerable if they run 
both agents, the company added. 


Dell Buys Firm, 


Expands IT Services 


Dell Computer Corp. acquired Plural 
Inc., a New York-based company 
that offers application development, 
integration and consulting services 
to users running Microsoft Corp. 
software. The companies didn’t dis- 
close the terms of the deal, which 
is aimed at boosting Dell's relatively 
small IT services business. Plural, 
which has 200 employees, had 
revenue of $46 million last year. 


Kumar Says Users 
Holding Off on Buys 


Sanjay Kumar, CEO of Computer 
Associates International Inc., said 
many corporate users still aren't 
investing in future IT needs, even 
though they have become less jit- 
tery about making purchases. The 
reluctance to spend “might stay 
around for a while,” Kumar said at 
a meeting that Islandia, N.Y.-based 
CA held with financial analysts. 





NEWS 


Microsoft Developing 
-Sharing Software 


TrustBridge technology to support single 
sign-on but won’t be ready until next year 


BY CAROL SLIWA 
ICROSOFT LAST 
week laid out 
more details 
about its secu- 
rity road map 
for Web services, unveiling 
Windows-based software that 
aims to help businesses share 
user identity information with 
one another. 

The announcement gave Mi- 
crosoft Corp. a marketing jump 
on the rival Liberty Alliance 
Project backed by Sun Micro- 
systems Inc., which isn’t ex- 
pected to reveal the first part 
of its technical specification 
until later this summer. But 


| the Microsoft software, code- 


named TrustBridge, isn’t due 
to ship until next year. And 
right now, little is known about 
the final form it will take. 
Steven VanRoekel, director 
of Web services marketing 
at Microsoft, said TrustBridge 





could be sold separately or 
bundled into a product, such as 
the Windows .Net server oper- 
ating systems or the Internet Se- 


| curity and Acceleration Server. 


One of the main potential 
benefits of the TrustBridge 
software is that it will enable 
users from one company to log 
in and prove their identities 
just once, on their own sys- 
tems, to gain access to applica- 


tions and resources they’re au- 
| thorized to use on other com- 


panies’ systems. 


Steven Sommer, CIO at New | 


York law firm Hughes Hub- 
bard & Reed LLP, said he can 
envision allowing clients or 
other law firms to access a 
database relating to a particu- 
lar case through Web services, 
rather than duplicating the in- 
formation and giving copies. 
“We've been looking for the 
one sign-on approach within 
our own jesnotcmsanaiae so this is 





Microsoft's plans 
for Web services 
security: 


.NET PASSPORT authentica- 
tion service for business- 
to-consumer interaction will 
add support for Kerberos and 
other key Web service stan- 
dards next year. 


VISUAL STUDIO .NET will 
support WS-Security later 
this year to allow developers 
to add digital signature sup- 
port and SOAP message 
encryption. 


WINDOWS .NET SERVER, due 
to ship next year, will provide 
cross-directory trust, integra- 
tion of Passport and security 
protocol translation. 
just an extension,” Sommer 
said. “I think that would be a 
boon to us, and less expensive 
to maintain in the long run.” 
But some corporate users 
said they see no pressing need 


| for the TrustBridge software. 


Jon Dell’Antonia, vice presi- 





Security Appliance Monitors Wireless LANs 


System sniffs for 
rogue access points 


BY BOB BREWIN 
Wireless LAN security got 
some long-needed help last 
week, observers said, when 
AirDefense Inc. released a 
product that can detect wire- 
less hackers and unauthorized 
rogue access points installed 
on enterprise networks by em- 
ployees or malicious intruders. 

Alpharetta, Ga.-based Air- 
Defense’s namesake security 
appliance, which began ship- 
ping last week, includes a soft- 
ware database containing the 
electronic signatures of most 
wireless LAN cards as well 





as the signatures of wireless 
hacking freeware such as Net- 
Stumbler. 

The system monitors the 
area around an office building 
or manufacturing plant for sig- 
nals in the 2.4-GHz frequency 
band. It sniffs the airwaves for 
signals and then compares 
them to authorized devices 
and software that are listed in 
the database. 

Jay Chaudhry, CEO of Air- 
Defense, said these features 
can let network managers 
identify probes of a wireless 
LAN network or detect the op- 
eration of a rogue access point 
connected to the network. 

Dave Bray, director of net- 
work technology services at 
ADC Telecommunications Inc. 





in Eden Prairie, Minn., said his 
company is evaluating the sys- 
tem. He said he hasn’t “seen 
another product like this.” 

Bray said that ADC, which 
has more than 100 facilities 
worldwide, is “worried about 
rogue access points, because 
the price has come down so far 
{to around $100] that almost 
anyone can go out and buy 
one. They’re also easy to in- 
stall, and once installed, some- 
one can sit in our parking lot 
and gain access inside our 
trusted network.” 

Matthew Kovar, an analyst at 
The Yankee Group in Boston, 
said AirDefense is ahead of the 
competition in developing a 
multifaceted security tool for 
the wireless LAN market. D 


| noted that he 
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| dent of information systems at 


OshKosh B’Gosh Inc. in Osh- 
kosh, Wis., said his company 
already accesses 401(k) and 
other human resources infor- 
mation from an outside firm, 
and the advantage of switching 
to a Web-services-based sys- 
tem is unclear to him. 

Dell’Antonia said he can see 
the potential value of the 
TrustBridge technology, but he 
can’t dictate 
what type of software his out- 
side providers use. 

Catherine Quirk, an analyst 
at Boston-based AMR Re- 
search Inc., said the main 
downside is that in order to get 
the optimal security features, 
both parties must be running 
the TrustBridge software. Van- 
Roekel noted that both parties 
must also use Active Directory 
or some other directory that 
supports Kerberos Version 5. 

He said that under the Trust- 
Bridge scenario, users would 
log on to their systems and re- 
ceive tickets that employ Ker- 
beros technology to ensure 
that they’re valid users. The 
TrustBridge software encapsu- 
lates that information into an 
XML-based message, which is 
transmitted through the corpo- 
rate firewall’s HTTP port via 
the Simple Object Access Pro- 
tocol to another company. 

The other firm’s TrustBridge 
software would then decode 
the message and pass the infor- 


| mation to the network, finaliz- 


ing a trust relationship, Van- 
Roekel said. 

John Pescatore, an analyst at 
Stamford, Conn.-based Gart- 
ner Inc., said the Microsoft sys- 
tem will enable companies to 
use Windows servers for au- 
thentication instead of paying 
companies that will charge 
per-user fees for that service. 

“The downside to IT shops 
is they start getting driven 
more and more to a single plat- 
form,” he said. “This puts added 
pressure on the Liberty Alliance 
to quickly come out with their 
standards for doing this same 
type of trust brokering.” D 


SECURITY UPDATE 


For security news and resources, 
visit our Web site: 
e QuickLink: k1600 


www.comput .com 











NEWS 


Controversy Clouds Calif. 
Energy Market Systems 


Foggy regulations, unwieldy technology 
complicate charges of Perot impropriety 


BY MELISSA SOLOMON 
SENATE 


Perot Systems 
Corp. coached en- 
ergy suppliers to 
manipulate the very systems it 
built for California’s electrical 


power grid operators raises a 


fundamental question: Does 
the state have the wherewithal 
to develop a workable system to 
manage the energy market? 

The development of risk- 
management software to en- 
sure that market participants 
are playing by the rules is easy, 
according to Ethan Cohen, a 
manager at Blue Ridge Part- 
ners, a utility and financial 
services consulting firm in 
McLean, Va. 

But without clear rules from 
the Federal Energy Regula- 
tory Commission (FERC) about 
what constitutes illegal activity 
and the consequences of violat- 
ing the rules, the systems are 
useless, he said. 

“I don’t think anyone at the 
end of the day wants FERC to 
be a dogged policeman of the 
energy markets,” said Cohen. 
“But FERC hasn’t said anything 
consistent about bulk power 
markets in 20 years.” 

That may account for some 
of the haziness over legal and 
ethical issues associated with 
last week’s revelations about 
the alleged activities of Plano, 
Texas-based Perot Systems. 

Slide presentations released 
last week by the Senate sub- 
committee investigating price 
manipulation in California’s 
wholesale markets describe 
“holes” in the state’s energy 


For access to the Perot Systems slide 
presentation, visit our Web Site. 
QuickLink: 22170 


www.computerworid.com 


investiga- | 
tion into whether | 





market system and strategies 
that firms could use to increase 
congestion and drive up costs. 
The slide presentations were 
prepared by Perot Systems and 
uncovered by the subcommit- 
tee in subpoenaed documents 
turned over by Houston-based 
Reliant Energy Corp. Perot 
Systems was one of two con- 
tractors hired to build, test and 
manage the computer systems 


for the California Independent | 


System Operator (ISO) and the 
now-defunct California Power 
Exchange Corp. 

But Stephanie McCorkle, a 





| spokeswoman for the ISO, said 


| last week that it’s not clear that 


any of the strategies described 
in the Perot presentation re- 
vealed classified information. 
“Obviously, we would be ex- 
tremely concerned if there was 
a business relationship estab- 
lished and proprietary infor- 
mation was released,” said Mc- 
Corkle. If the ISO 
finds that Perot vi- 
olated its confiden- 
tiality clause, it will 
bring the matter to 
court, she said. 

In a statement last week, 
Perot Systems said it prepared 
the presentation to help the 
ISO identify and correct flaws 
in the system 


Wall Street Aims to Thwart 
Criminals With Database 


BY LUCAS MEARIAN 

More than a dozen Wall Street 
firms are joining forces to cre- 
ate a company that will offer a 


customer database to the fi- | 


nancial services industry for 
screening out suspected crimi- 
nals. The move is intended to 


help companies comply with | 


new antiterrorist regulations. 
The Regulatory DataCorp 
Int’l LLC is principally the cre- 
ation of The Goldman Sachs 
Group Inc. in New York, but 
it’s also being financially sup- 
ported by firms such as Merrill 
Lynch & Co., Citigroup Inc. 
and UBS PaineWebber Inc. 
The company is expected to 


launch in the next couple of 


weeks, said a Goldman Sachs 
spokeswoman. Other compa- 
nies involved in the venture 
didn’t return phone calls or 
declined to comment. 
According to published re- 
ports, Regulatory DataCorp 
will compile information from 





public resources including in- 
ternational, 
law enforcement records. It 
will then sell access to the 
database to other companies 
so they can screen potential 
customers. Regulatory Data- 


Corp will be a separate com- | 


pany from its founders, said 
the Goldman Sachs spokes- 


woman, who declined to com- | 
| 


ment further on the venture. 
While not unique, the data- 


base would be among only a | 


handful in the world perform- 
ing industrywide customer 
searches, according to Brian 
Smith, a partner at law firm 
Mayer, Brown, Rowe & Maw in 
Washington, which specializes 
in regulatory issues in the fi- 
nancial services marketplace. 
“The big difference here is 
that it is financial services 
firms doing this and not tech- 
nology companies,” he said. 
Since the U.S. Patriot Act 
was passed by Congress in re- 


and insisted that | 
| it didn’t share the information 


federal and local | 


oz 


MORE TH THIS ISSUE. 


IT is re-energizing California 
utility companies. Page 24 


en 





with market participants. 

In March 1997, Perot and 
Zurich-based ABB Ltd. won a 
yearlong $57 million contract 
from the ISO to lead an alliance 
of vendors to develop, test and 
manage a systems platform to 
operate the state’s deregulated 
power market. 

That’s where the fundamen- 
tal problem lies — 
in the ISO’s com- 
puter systems, said 
Chris Schreiber, an 
aide to Sen. Joseph 
Dunn (D-Calif.), co- 
chairman of the Senate sub- 
committee that released the 
Perot presentation. 

“The system is so cumber- 
some...and no one [at the 


ISO] knows how to run it, and | 


sponse to the Sept. ll terrorist | 


attacks, banks and brokerages 


; 
| have been scrambling to com- 


ply with rules that require them 
to “know their customers” pri- 
or to allowing them to open 
accounts (see box). 

Richard DeLotto, an analyst 
at Gartner Inc. in Stamford, 
Conn., said it makes sense 
the firms to work together. “I 
there’s a bad guy working in 
town, he’s going to walk from 
bank to bank. So it increases the 
likelihood of catching a money 
launderer or terrorist,” he said. 

British banking compliance 


The Patriot Act 
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Power Play 


The IT systems that Perot and 
ABB built for the California 
energy market operator include: 
@ Energy management system to monitor 
real-time performance of the electric system 


@ Plant information system that provides 
power plant data 


® Scheduling infrastructure and applications 
to balance energy production and use 


@ An Internet-enabled automated dispatch 
system for last-minute energy needs 


® Meter data acquisition system 


@ Systems that bill customers and settle dif- 
ferences between deliveries and schedules 


® A data warehouse 


no one understands it,” he said. 
On May 1, the ISO submitted 
a new systems design plan to 
the FERC that addresses and 
corrects many of the loopholes 
that have been identified, said 
McCorkle. The FERC is sched- 
uled to review and make a de- 
cision on the plan by October. D 


firm World-Check Inc., which 
is supported by Swiss banks, 
gained notoriety when it was 
discovered in February that it 
had profiles of 15 of the 19 Sept. 
ll hijackers in its database and 
had listed them as “high risk.” 
World-Check claims to have a 
total of approximately 55,000 
individuals listed. 

The Financial Services In- 
formation Sharing and Analy- 
sis Center is a private organiza- 
tion in New York that charges 
companies a minimum $7,000 
annual fee for alerts and access 
to information about hacking 
and cyberterrorism threats. 

However, some privacy ad- 
vocates fear that private indus- 
try databases will prevent con- 
sumers from reviewing infor- 
mation affecting their ability to 
use financial services. 

“There have been concerns 
that [other databases] operate 
under a cloak of secrecy,” said 
Stephen Keating, executive di- 
rector of The Privacy Founda- 
tion in Denver. He said Regula- 
tory DataCorp’s database could 
be more comprehensive than 
others because it’s expected to 
retrieve information from hun- 
dreds of sources worldwide. D 
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Merged HP to Boost 
Consulting, Services 


Company realigning 65,000-person 
services organization into five areas 


BY JAIKUMAR VIJAYAN 
EWLETT-PACKARD 
Co. will focus on 
delivering a wide 
range of IT con- 
sulting and busi- 
ness process services as part of 
its postmerger strategy, a se- 
nior executive said last week. 
To lay the groundwork for 
that effort, HP is realigning its 
65,000-person services organi- 
zation into five major areas: IT 
and business governance ser- 
vices, agile and mission-criti- 
cal infrastructure _ services, 
extended enterprise services, 
open-environment services 
and next-generation technolo- 
gy services. 
The goal is to expand HP’s 
services capabilities beyond its 





current emphasis on IT infra- 
structure support, said Juergen 
Rottler, a senior vice president 
with HP’s services organiza- 
tion. Going forward, HP’s em- 
phasis will be on building ca- 
pabilities that let it engage 
with users from the applica- 
tion design stage right through 
EL RR Sct EY Rl AR a PEE 
In a briefing with financial an- 
alysts last week, HP executives 
also said the company: 

® Expects to complete 15,000 layoffs by 
October, 2003 


® Has offered voluntary retirement options 
to 900 employees. 


® Will realize a $2.5 billion cost savings 
from its Compaq acquisition by October, 
2003 





integration, management and 
end-of-life/migration services. 

“We are talking about signif- 
icantly more end-to-end ser- 
vices that start with customer 
business problems rather than 
just a technology,” he said. 

Don’t expect to see any ma- 
jor new HP services offerings 
in the near term though, cau- 
tioned Eric Rocco, an analyst at 
Gartner Inc.’s San Jose-based 
Dataquest unit. 

For the next 12 to 18 months 


| or so, HP is likely to be preoc- 


cupied with the task of inte- 
grating its own services orga- 
nization with that of Compaq 
Computer Corp., Rocco said. 
“But their goal certainly is to 
take what is currently the 
largest IT infrastructure sup- 
port organization in the world 
and craft it into a full-service 


| company like IBM,” he said. 


As part of that strategy, Roc- 


| co said, look for HP to make 


Web Services Loom Ahead for Travel Firms 


Technology eyed for online bookings 


BY JENNIFER DISABATINO 
NEW YORK 

Today’s, text-pager-toting teen- 
agers are tomorrow’s travel 
buyers, and the industry is 
building an IT infrastructure 
for that future. 

Web services will become an 
important distribution channel 
for travel companies, accord- 
ing to several IT executives 
who attended last week’s Trav- 
el Commerce Conference & 
Expo here. But it will be a 
while before browsers replace 
booking agents, they said. 

“With a $5,000, five-island 
Hawaii trip, people just aren’t 
closing it online,” said Andre 
Haroche, CIO at Liberty Travel 
Inc. in Ramsey, N.J. “Will they 
do it 30 years from now? Yeah, 
they will. We’re dabbling in 





[Web services] in the right 
places, so when it’s mature, 
we'll go with it.” 

Conference attendees said 
that to survive, online travel 
sites that today primarily sell 
commodity travel services, 
such as economy airline seats, 
will increasingly sell higher- 
yield packaged deals. 

That will require the cre- 
ation of standards-based links 
between suppliers, so travel 
agents and consumers can tie 
together a flight, hotel, car 
rental and even snorkeling ses- 
sions while retaining business 
rules and customer informa- 
tion for each company. 

The OpenTravel Alliance 
Inc. in Alexandria, Va., is work- 
ing on XML standards specifi- 
cally for the travel industry. 





But companies say they can’t 
wait until the organization’s 


| standards are complete before 
creating online business rela- | 


tionships with customers and 
business partners. 


Airlines, car rental compa- | 
nies, hotel chains and online | 


travel vendors such as Expedia 


Why Web Services? 

Travel-based Web stan- 

dards will help companies 

share data to improve: 

= Security, by creating uni- 
form identity and traveler 

 ...  ea 

= Customer relationship 
management 

= Personalization 





targeted acquisitions in areas 
where the company needs to 
quickly build capabilities. 

HP’s unsuccessful bids !ast 
year to acquire consulting gi- 
ant PricewaterhouseCoopers 
and Comdisco Inc.’s disaster 
recovery unit are indications 
of the company’s strategy in 
this area, Rocco said. 

In the short term, HP’s strat- 
egy will rely on taking maxi- 
mum advantage of its com- 
bined strengths in horizontal 
technology segments such as 
Microsoft Corp.'s Exchange 
and in vertical segments such 
as the telecommunications sec- 
tor, said Laurie McCabe, an an- 
alyst at Summit Strategies Inc. 
in Boston. 

“But they still have a long 
way to go on the consulting 
side to catch up with an IBM or 
an EDS,” McCabe said. As a re- 
sult, look for HP to rely heavily 
on channel partners to deliver 
key services capabilities while 
it builds its own, she said. D 


MORE ON THE MERGER 


For full coverage of the HP/Compaq 
merger, visit our Web site: 


QuickLink: a1650 
www.computerworld.com 


Inc. have already created in- 
ventory links. For example, 
Bellevue, Wash.-based Expedia 
provides yield management 
analysis tools to customer ho- 
tels over the Web. 

In 1999, Budget Group Inc. in 
Lisle, Ill, started investing in 
direct links to partner airlines 
and corporate customers 
through Java-based middle- 
ware, said Marylou Johnson, 
the company’s vice president 
of IT services. 

For others, the demand isn’t 
there yet. Tom Murphy, CIO at 
Royal Caribbean Cruises Ltd. 


| in Miami, said that only about 


1% of his company’s sales come 
from its Web site. 

Both Royal Caribbean and 
Liberty Travel are building in- 
frastructures with IBM Global 
Services to create Web ser- 
vices in anticipation of the 
coming demand, but Royal 
Caribbean is basing its system 
on Java and Liberty is using 
-Net from Microsoft Corp. 


Liberty Travel will relaunch | 
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HP Mulls Retreat 
From Middleware 


HP may discontinue some of its 
middleware products as part its 
postmerger software strategy. 

In a briefing with financial an- 
alysts in Boston last week, HP 
executive Peter Blackmore said 
the company is rethinking its 
middleware strategy and is “con- 
sidering retiring some assets in 
that space.” 

Going forward, the company 
will depend on partnerships with 
other software vendors to meet 
customer requirements in this 
space, he said. 

An HP spokeswoman said 
the company will make a definite 
statement regarding its middle- 
ware plans the week of June 25, 
at an HP event in Seattle. 

A core part of HP's middle- 
ware suite is its Java application 
server, which it acquired in Octo- 
ber 2000 when it purchased 
Bluestone Software Inc. HP has 
made the software available as a 
free download to users in addi- 
tion to bundling it along with its 
HP-UX operating system. 

~ Jaikumar Vijayan 


its booking engine online next 
month, and the international 
travel agency is developing 
middleware that translates 
data stored in mainframe sys- 
tems so agents can book flights 
more easily and efficiently. 

Liberty Travel already hosts 
a private-label service through 
its Gogo Worldwide Vacations 
Inc. division, which hosts in- 
ventories of available bookings 
for other travel agencies such 
as Fort Worth, Texas-based 
Travelocity.com Inc. 

But Haroche said he wants 
to get out of hosting and share 
the inventories over the Web. 
Hosting is difficult, he said, 
adding that he would rather 
create a standard interface so 
Liberty Travel’s customers can 
access the different travel op- 
tions themselves. B 
LEGACY LINKS 
Web services are helping travel firms link 
systems that couldn't talk before 


QuickLink: 30410 


www.comput .com 








LL el diate UMC Mile lle l: MoM LET SLH not just o data center. Now you'te concerned 


with profitability. Business forecasting. 





They even want recommendations on 
system performance over in marketing 

Is your current software up to 
the challenge? 

This, of course, is why HP has 
evolved OpenView software from a 
network management tool into a 
sophisticated service management 
solution—covering everything from 
networks, storage and systems to 
services like ERP. e-commerce and call 
center management. Basically, the 
entire infrastructure on which your 
core business services depend 

So in addition to managing your 
infrastructure, HP OpenView now 
anticipates and resolves problems 
according to your organization's 
priorities—by department, service, 
even line of business. 

Increased efficiency. Lowered 
costs. Higher ROI. Being proactive 
with recommendations. That's what's 
expected of you. And what you can 
expect from HP OpenView manage- 
ment software. 

HP infrastructure solutions are 
engineered for the real world of 
business. Because the last time we 
checked, that’s where we all work 

To learn more about how HP 
OpenView Management software 
can help run your business, call 
1.800.HPASKME, ext. 246. Or visit us 
at www. hp.com/go/infrastructure 

Infrastructure: it starts with you 
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Continued from page 1 


Offshore 


As a result of the escalating 
tensions, CCC has had discus- 
sions with Cognizant about the 
latter’s backup and recovery 
schemes and its ability to move 
people to locations in the U.S., 
including to CCC’s facilities if 
need be, at short notice. 

“We are very anxious to 
maintain our relationship with 
Cognizant,” Beattie said. “But 
the situation in India has cer- 
tainly changed the risk profile” 
associated with doing projects 
there, he said. 

Baltimore-based asset man- 
agement firm T. Rowe Price 
Associates Inc. has outsourced 
several projects to Covansys 
Inc. in Farmington Hills, Mich. 
Covansys does work for T. 
Rowe Price in facilities in both 
the U.S. and India. 

Now, T. Rowe Price is look- 
ing at how much it will cost to 
conduct some of the work in 
India out of Covansys’ facilities 
in the U.S. “In the worst-case 
scenario, our plan is to use 
their off-site resources [in the 
U.S] to complete our offshore 
projects,” said Ram Mouli, vice 


Continued from page 1 


Smart Cards 


Moreover, millions more 


cards will be offered to air- | 


lines’ “registered travelers” — 
frequent fliers — which may 
help speed check-in times. The 
Transportation Security Ad- 
ministration said it doesn’t 
have a cost estimate. 

The U.S. Department of De- 
fense, meanwhile, is in the 
process of issuing 4.3 million 
secure smart cards to its per- 
sonnel at a rate of 7,000 per 
day. The program may be mir- 
rored in civilian agencies, with 
the potential deployment of 
millions more cards, federal 
officials said. 

“There is a tremendous 
amount of momentum in the 
system toward smart cards,” 
Paul Kurtz, senior director for 
national security at the White 








president of technology plan- 
ning at T. Rowe Price. “We are 
looking at how the rates will in- 
crease” by doing that, he added. 
Kingsport, Tenn.-based East- 
man Chemical Co. already has 
contingency plans to bring off- 
shore work back in-house, if it 
has to, said Jerry Hale, vice 
president and CIO of the firm. 


All Talk So Far 


But despite the clearly 
heightened concern, no one is 
talking about pulling out of 
projects in India yet, insisted 
executives at several Indian 
software companies. 

“People are more keen to 
understand our business conti- 
nuity and disaster recovery 
plans,” said Phaneesh Murthy, 
a vice president at Infosys 
Technologies Ltd., a Bangalore, 
India-based company whose 
clients include Fidelity Invest- 
ments, Visa International Inc. 
and J.C. Penney Co. 

“But so far none have told us 
of any change in their plans; 
for most, its business as usual,” 
said Kumar Mahadeva, CEO of 
Cognizant. 

That concern is prompting a 
flurry of activity by Indian 
vendors, however, which are 
seeking to reassure jittery U.S. 


House’s Office of Cyberspace 
Security, said at a Smart Card 
Alliance forum last week. 
Smart cards, if properly de- 
ployed, provide an excellent 
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Tips for U.S. companies with outsourcing investments in India: 


VELOP a comprehensive set of contingency plans, including alternative 
telecommunications paths with business partners and the ability to bring 
outsourced work in-house or transfer it to another third party. 


PEPER MRE R HE HERE REE ES EEE TES ESTHER SORE EEE TEESE ET ETE REET OD 


COMMUNICATE frequently with business partners in India to ensure that 
they are taking all the steps needed to deliver programming and other ser- 


vices to your organization. 


CONDUCT a full risk analysis of doing business in India and other regions, 
including an overview of the IT infrastructures, labor pool, political ciumate, 
costs, turnaround time and ability to react quickly to changing events. Weigh 
those risks against the costs of doing business in India and elsewhere. 


OOS HEROS OME T HOHE OEE HOH OTERO HEHEHE HEE ET ESE HEES ETD 


ENSURE that source code remains in the U.S. and that husiness partners in 
India are able to access the code while maintaining the filters to secure it. 


SECRETE EERE ERR EH THER TER ERER EEDA EOE SEHE HEHE ESSE OEOESH EE HOEST 


DETERMINE whether contracts allow you to transfer work from an offshore 
project to another location or back in-house without severe financial penalties. 


SECS EOE HETERO HEHE EH ETE TETHER EH TES HKRETE ETHER EH ETHOS HE { 


other potential geographic markets to outsource work, including 


the U.S., Eastern Europe, israel, ireland, China, Singapore, Russia, Mexico 


and Puerto Rico. 


PO a cA tern rer en ARPT 


clients about fallback plans in 
case of an all-out war. Many, 
such as Cognizant, have drawn 
up elaborate contingency plans 
for their customers, outlining 
specific steps that will be taken 
to quickly move people and 
processes to safe locations if 
war breaks out. 

India’s largest software 
house, Mumbai-based Tata 
Consultancy Services, has been 


means of security, he said. 

The sheer volume of federal 
demand “will fuel the indus- 
try,” said Randy Vanderhoof, 
CEO of the Princeton Junction 
N.J.-based Smart Card Alliance 
Inc., an educational and advo- 
cacy group made up of ven- 
dors and end users. Federal 
purchasing will bring in more 
vendors and drive down infra- 
structure costs, he said. 

Moreover, the federal push 
could improve card interoper- 
ability. Smart-card vendors 
must adhere to interoperabili- 
ty standards set by the gov- 
ernment in order to get that 
business. 

“We don’t want to be tied to 
a single vendor,” said Mary 
Dixon, director of the Penta- 
gon’s smart-card effort. “We 
wanted to be able to use any- 
body’s card, anybody’s readers, 
anybody’s middleware.” 

But it’s by no means certain 
that lower equipment costs 





seater cate cesta 


stashing away a large number 
of visas that it can use to send 
programmers to Europe or 
North American facilities in 
“the blink of an eye,” said Jim 
Thomas, a vice president at 
Tata’s Dallas office. 

Others, such as Covansys, are 
accelerating plans to ramp up 
capacity in the U.S to handle 
work now being handled in In- 
dia, if that becomes necessary. 


and improved interoperability 
would make biometric smart 


| cards attractive to businesses. 


Only about 1% of U.S. compa- 
nies use secure smart cards, 
according to the Smart Card 
Alliance. 


Awaiting Impetus 

Private-sector use is “all 
about the value that people 
perceive in the product,” said 
Jeff Staples, an Aldie, Va.-based 
smart-card consultant. It’s dif- 
ficult for the private sector “to 
place a premium on that secu- 
rity unless they have a real or 
immediate threat,” he said. 

In its most recent figures for 
2000, IDC in Framingham, 
Mass., reported enterprise 
smart-card spending of only 
about $46 million. With the 
decline in IT spending last 
year, IDC isn’t expecting big 
growth in those 2001 num- 
bers, said IDC analyst Charles 
Kolodgy. Private-sector bene- 
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India is one of the most pop- 
ular destinations for offshore 
software development work. 
Scores of U.S. companies have 
ongoing projects in the coun- 
try, while some, such as Gener- 
al Electric Co., Target Corp. 
and Ford Motor Co., have full- 
fledged software development 
centers. 

Currently, about 185 Fortune 
500 companies and more than 
220 Global 1,000 companies 
outsource technical services to 
India, according to India’s Na- 
tional Association of Software 
and Service Companies. 

Many USS retailers are using 
Indian programming shops for 
maintenance work on custom- 
ized software packages. And 
they’re “thrilled to death” with 
the results, said Cathy Hotka, 
vice president of IT at the Na- 
tional Retail Federation, a trade 
association in Washington. 

“Anything that impacts their 
ability” to get that work com- 
pleted “will have a ripple effect 
throughout their IT shops,” 
she said. D 


The threat of war could compromise India’s 

long-term future as an offshore IT center. 
QuickLink: 30398 
www.computerworld.com 


fits will depend on the speed of 
the federal rollout, he said. 

The cost of smart cards can 
vary considerably. The Defense 
Department is spending about 
$40 per card, a figure that in- 
cludes infrastructure. Industry 
experts say the per-seat cost 
can reach $200, depending on 
software, biometrics, depth of 
systems integration and card- 
monitoring ability. 

The Transportation Security 
Administration plans to begin 
pilot testing its Java-based, 
32KB smart-card system possi- 
bly by late summer at several 
major airports and seaports, an 
agency official said. A finger- 
print is expected to serve as 
the biometric identifier. D 


NADER VS. MICROSOFT 


Adoption of smart cards isn’t the only way 

the government can influence private- 

sector IT. To learn more, visit our Web site: 
QuickLink: 30404 
www.computerworld.com 
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When the future of your enterprise is at stake, it’s good 
to have help. Not to worry. Work with Microsoft .NET con 


nected software and you'll be accompanied by some of the 


world’s leading technology consultants, developers, and 


services organizations 


You can develop in-house, or work with Microsoft Consulting 
Services. And once you've deployed your solutions, Microsoft 


Premier Support can help you maintain them. 


u also have the option of calling or 


over 24,000 organizations and 1 million 
experts trained as Microsoft ceriified 


professionals who will be there to help you design, build, 


deploy, and maintain Microsoft-based solutions for your 


enterprise. With so much support behind .NET, you have 


the flexibility of choice. No matter what industry you're 
there are qualified partners who can create custon 
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—including Accenture, Avanade, Cap Gemini 
Ernst & Young, Compaq Global Services, Dell, EDS, KPMG 
Consulting, Unisys. and more—to provide Fortune 1000 companies 
with complete enterprise-class solutions 
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Clusters Give Users Supercomputer Power 


BY JAIKUMAR VIJAYAN | dor’s use of Intel-based servers 
Early users of new clustered to deliver supercomputerlike 
sy stems + om Dell onan performance is proving to be a 

good way to reduce hardware 


costs and improve scalability. 
Dell announced its high-per- 

formance computing clusters 

technology in February. The 


| company is bundling its Power- 


Edge servers with specialized 
clustering and message-pass- 
ing software from MPI Soft- 
ware Technology Inc. in Stark- 
ville, Miss., and Paralogic Inc. in 
Bethlehem, Pa. 





Your immediate solution to securely transfer 
ever-increasing data and save money. 


ASCENT SOLUTIONS Inc., developer and distributor of: 


Cross- 
Platform 


Prahactinn 
Windows 


PKZIP empowers IT professionals by providing a multi-purpose tool to get the job done while generating real cost savings 
for the organization. As a dynamic, cross-platform solution, PKZIP uses next generation X3™ compression and encryption 
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The bundles come config- 
ured with 16 to 128 processors 
and can be tied together to build 
very large systems for use 
in scientific research, financial 
modeling and data-intensive 
business applications. 

For example, Paris-based 
Compagnie Generale de Geo- 
physique (CGG) used Dell’s 
technology to build a 3,072- 
processor cluster that analyzes 
seismic data for oil companies. 

Derrick Deaton, an execu- 
tive vice president at CGG’s 
Houston office, wouldn’t dis- 
close pricing information. But 
he said the cluster is delivering 
performance that’s comparable 
to the throughput of special- 
purpose supercomputers, at 
roughly a quarter of the cost. 

“The fact that you can tie so 
many [servers] together so in- 
expensively allows you to get 
generally the same processing 
power,” Deaton said. 

That’s why Sandia National 
Laboratories in Albuquerque, 
N.M., is using a 128-node Dell 
cluster to try to simulate the 
impact of nuclear weapons. 


Examining the Advantages 

Apart from the lower costs, 
the fact that such clusters can 
typically be built and put into 
use much more quickly than 
traditional supercomputers is 
a big advantage, said Milt 
Clauser, a principal member of 
Sandia’s technical staff. 

But Deaton said users need 
to be aware that the clusters 
can occupy considerably more 
space than supercomputers and 
generate a lot of heat. 

The increasing availability 
of open-source clustering and 
parallel computing software 
and the growing power of Intel 
Corp. processors are making 
high-performance clusters in- 
creasingly feasible, said Dan 
Kusnetzky, an analyst at Fram- 
ingham, Mass.-based IDC. 

IBM offers tools that help 
assemble large Intel- 
based clusters, Kusnetzky said. 
And Hewlett-Packard Co. plans 
to harness commodity servers 
internally to offer utilitylike 
computer services to cus- 
tomers, he added. But thus far, 
Dell is offering the most formal 
program for building the clus- 
ters, Kusnetzky said. D 


users 
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IBM Plans Charges 
Of Up to $2.58 . . . 


IBM said it plans to take restructur- 
ing charges of up to $2.5 billion, 
primarily during the current quarter. 
That could result in a loss for IBM, 
which reported lower-than-expected 
results for the first quarter. Among 
the moves announced by IBM last 
week was a layoff of 1,500 workers 
at its microelectronics unit, which 
will decrease that operation’s work- 
force by 7.5%. 


Es em PE A A SELIG AIEEE A ITER S A TE 
_ . . And Signs Disk 
Deal With Hitachi 

IBM and Tokyo-based Hitachi Ltd. 
finalized a deal under which Hitachi 
will take control of IBM's disk drive 
operations. Hitachi will pay $2.05 
billion for a 70% stake in a new 
joint venture and then assume full 
ownership after three years, the 
companies said. Talks about a sepa- 
rate deal to jointly develop storage 


systems and networking technology 
are continuing, they added. 


Oracle Trims App 
Development Staff 


Oracle Corp. disclosed that it cut 
200 developers from its business 
applications unit, reducing the com- 
pany’s overall development staff by 
about 2%. The layoffs stemmed 
from a reorganization announced in 
March. CEO Larry Ellison said sepa- 
rately that Oracle expects to meet 
financial expectations for its fourth 
quarter ended May 31. 


Microsoft, SEC Settle 


Accounting Charges 


Microsoft Corp. and the Securities 
and Exchange Commission settled 
charges that the company violated 
accounting rules and misstated its 
profits in various quarters from 
1994 to 1998. The SEC found that 
Microsoft committed multiple viola- 
tions, but the company wasn’t fined 
or forced to restate its earnings. 
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"NEWSINDUS 


un Moves to Open 
Up Its Portal Software 


Will tie to rival app server, Os technology 


BY MICHAEL MEEHAN 


UN MICROSYSTEMS | 
tion servers developed by IBM 


Inc. last week 
nounced that the next 


an- 


version of its portal | 
server software will | 


with rival application 
servers and support operating 


| systems other than Solaris, al- 
| though those features won't be 
in the initial release. 


Part of the strategy behind 


communications and _ portal 
products. Links to the applica- 


and San Jose-based BEA are 


release by year’s end (see box). 


Expansion Strategy 


Sun’s own application serv- 


| er, originally part of its iPlanet 
| line and renamed the Sun ONE 


| the portal move is some real- | 


politick marketing by Sun. BEA | 


| Systems Inc. and IBM domi- 


| share, with 


nate application server sales, | 


| and each had a 34% share of 
that market last year, according 
to a report released in March 

by Cambridge, Mass.-based 
| Giga Information Group Inc. 


Application Server in April, 
was a distant third in market 
7% last year, ac- 
cording to the Giga report. 

Sun is trying to boost usage 
of its application server by 
bundling the software with its 
new Solaris 9 operating system 


| [QuickLink: 30070]. But Fanelli 


“Pure and simple, we need to | 


| sell into those installed bases,” 
| said John Fanelli, director of | 
| product marketing for Sun’s 


IBM Beefs Up 


| Rollout includes 


said the company now plans to | 


compete in the software mar- 
ket on a product-by-product 


basis instead of treating the | 


} ux 
| year. The software, which pro- 


| Sun ONE line as a suite. 


Robert Lerner, an analyst at 


move on Sun’s part. 


tions, and Sun seems to be get- 
ting the message,” he said. 

Giga analyst Laura Ramos 
agreed that multiplatform sup- 
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| Sun’s Portal Phases 


| Current Analysis Inc. in Ster- | 
| ling, Va., called the plan a 

| smart 
| “Customers are not going to be | 
| locked into proprietary solu- 
due to be added to the upcom- | 
ing Sun ONE Portal Server 6 | 


AUGUST: General release of 
Sun ONE Portal Server 6 with 


identity management capabil- 
ities and other features. 


DECEMBER: Compatibility 
with BEA’s WebLogic and 
IBM’s WebSphere application 
server software packages. 


FIRST HALF OF 2003: Sup- 
port for running the portal 
software on Linux and Win- 
dows 2000 systems. 


| along with Java tools that main- 
| tain end-user session informa- 


port is a necessary step for | 


Sun, at least in the portal serv- 
er business. “It will certainly 
help them close deals,” she 
said. “It’s not going to come up 


| asa disqualifier anymore.” 


Sun said it plans to make the 
portal server available on Lin- 
and Windows 2000 next 


vides end users with a com- 
mon Web-based launching pad 
for different applications, now 
runs only on Solaris. 

Other new features include 


| an identity server that will let 


users restrict portal access, 


Database Management Line 


IBM also said it’s developing 


| several tools that will support 


self-managing tools | 


BY MARC L. SONGINI 
last week announced 
plans to ship 20 new or up- 


| graded database management 


tools in a bid to bolster its com- 


| petitive position in that mar- 
| ket, where the company is still 


a relative newcomer. 


Following through on a 


| promise made at a user group | 


conference last month [Quick- 
Link: 29841], IBM detailed a 
pair of self-managing tools for 


administering the Windows, 


Unix and Linux versions of its 


| DB2 database. One tool ana- 


lyzes DB2’s performance and 
recommends tuning changes, 
and the other handles database 
recovery procedures. 


multiple versions of DB2 as 


well as Informix Dynamic 


Server (IDS), which the com- 


pany bought last year as part 


of its acquisition of Informix 


| Corp.’s database operations. In 





addition, IBM is rolling out 15 


AT A GLANCE 


|New Toolbox 


SELF-MANAGING UTILITIES: Two 
products for automating DB2 performance- 
tuning and database recovery. Both are 
priced at $8,000 per processor. 
MULTIPLATFORM TOOLS: Data extrac- 
tion, table editing and Web-based querying 
software for DB2 and IDS. Pricing starts at 
$3,500 per processor. 


performance management and SQL query 
analysis tools. Capacity-based prices start 


| at $2,620 and $1,310, respectively 





| database utilities for the ver- 
sion of DB2 that runs on its | 


zSeries mainframes (see box). 
IBM entered the database 


tion between a portal and vari- 
ous application and Web serv- 
ers to allow single sign-on capa- 
bilities. Web services support 
will also be part of the offering. 

Lerner said IBM has already 


| added multiplatform support 


to its portal software. He noted 


| that IBM, BEA, Sun and, to a 


lesser extent, SAP AG have 
managed to muscle into the 
portal market at the expense 


| of smaller vendors that focus 


| solely on that technology. D 


Stacy Cowley of the IDG News 
Service contributed to this story. 


| has been working on automat- 


ing its database management 
tools for the past several years. 

However, Kernochan said 
that IBM has done a good job 
with its new management utili- 


| ties. IBM had no choice but to 


tools market just 18 months | 
| them of the long-term viability 
| of the IDS software, he said. 


ago, but it now offers 60 man- 


| agement products, said Jeff 
| Jones, director of strategy for | 
| 7 

the company’s data manage- 


ment solutions unit. The new 
tools are designed to make it 
easier for database administra- 
tors to work with DB2 and re- 
duce internal costs, he noted. 
Wayne Kernochan, an ana- 


lyst at Aberdeen Group Inc. in 


Boston, said IBM isn’t blazing 
any new technology paths with 
the products it highlighted last 


offer Informix users some 


database tools to help reassure 


Joseph Burns, a senior data- 
base consultant at insurer High- 


| mark Inc. in Cranberry, Pa., 


said at last month’s Interna- 


| tional DB2 Users Group con- 


ference in San Diego that he 


| thinks IBM’s database tools are 
| now competitive with rival of- 


week. Rivals such as Islandia, | 
N.Y.-based Computer Associ- | 


ates International Inc. and 
Houston-based BMC Software 
Inc. already offer similar tools, 
Kernochan said, noting that CA 


ferings on functionality. 

IBM said the self-managing 
performance-tuning tool 
scheduled for release late next 
month, and the database re- 
covery product will follow in 
September. The mainframe 
DB2 utilities and the mixed 


is 


| tools for DB2 and IDS are due 


before the end of next month. D 








NEWSOPINION 


PATRICIA KEEFE 


‘Trustworthy 


RUST HAS BECOME THE RAREST of 
virtues these days. Even the briefest 
scan of recent headlines must force the 
conclusion that we as a nation are se- 
verely deficient in trust right now. 


Scandalous corporate 
behavior runs rampant. 
So much so that one re- 
cent business magazine 
cover story blared 
“Memo to CEOs: Why 
nobody trusts you any- 
more and what you can 
do about it.” There’s a lot 
to be addressed. There’s 
the conjoined Enron and 
Arthur Andersen scan- 
dals, which devastated 
two once-respected com- 
panies, sinking the careers and liveli- 
hoods of many decent people. The 
Securities and Exchange Commis- 
sion has probed how many compa- 
nies for questionable accounting 
practices in the past quarter? It just 
settled with Microsoft, which for 
some is the poster child for untrust- 
worthiness. Also under the micro- 
scope are numerous brokers and in- 
vestment bankers who allegedly is- 
sued biased stock ratings about dot- 
com companies that they were pro- 


moting or courting. Online business- | 


es are rewriting their privacy poli- 
cies at the expense of consumer 
rights, undermining talk of industry 
self-policing. 

On a national level, many people 
have lost trust in government as the 
chorus of who knew what, when pri- 
or to 9-11 grows ever more strident. 

High-tech has hardly been im- 

nune. Outsourcing and obtuse li- 
censing plans have IT workers and 
users up in arms. The state of Cali- 
fornia’s investigation of its $95 mil- 
lion contract with Oracle has al- 
legedly caused other potential cus- 
tomers to take a harder look at the 
company and its contracts. 

Closer to home, corporate IT is 
wrestling with its own trust issues. 
Some organizations are still recover- 


r 
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ing from distrust on the 
business side created af- 
ter billions were spent on 
Y2k remediation, and 
then nothing went 
wrong. Budget requests 
were already falling un- 
der greater scrutiny 
when the recession 
kicked in. 

Project management is 
another critical high- 
wire act, and one that 
many IT departments 
still do badly, which ruins trust 
among users. Take the U.S. Navy’s 
$6.9 billion N/MCI intranet program 
{QuickLinks: 29843, 30073], which is 
reportedly riddled with user dissatis- 
faction. Our sources have blamed 
lack of planning, mismanagement 
and fierce internal resistance to the 
program. 

Users are the ones who pay the 
price when projects go awry. But IT 
also loses. A recent Pivia white pa- 
per notes that external customers 





vote with their feet, but internal cus- 
tomers stick around and express 
their dissatisfaction with you and 
your managers. 

A new breed of project managers 
is rebelling against traditional 
process-heavy methodologies that 
can isolate people and foster dis- 
trust. Instead, these folks are using 
“extreme project management” — an 
iterative approach that stresses com- 
munication and collaboration. Busi- 
ness stakeholders define the project, 
set the tone, stay involved and make 
the decisions from beginning to end. 
If the project is going to be late or 
over budget, IT people and business 
people know it at the same time. 
There’s no opportunity to hide the 
truth, so trust is a given. 

How’s that for plain old common 
sense? And the payoffs are tremen- 
dous even if, and especially if, the 
project stumbles. 

An investment in this methodolo- 
gy will be well worth the effort. 
Trust is both a difficult and delicate 
matter. It’s tough to establish, and 
you can lose it in a nanosecond. It’s 
foolish not to explore any avenue to 
gaining trust. And any move you 
make in that direction is certain to 
have the added bonus of winning IT 
respect as well. D 
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PIMM FOX 


ASP Model Is 
Alive and Well 


UT OF THE ASHES of 

dot-com rubble good 

things grow. The 
“back-to-basics” rush charac- 
terized by IT budgets stuck in 


neutral belie an important truth: With- 
out the hype, spending and dreaming 
about the Internet, we'd be stuck in a 
client/server world without efficient 
means to share information. A good 
example is the building trade. 

In halcyon days, Buzzsaw.com, a 
venture-backed San Francisco-based 
start-up, was going to revolutionize the 
way buildings 
got built. The 
goal: to aggre- 
gate the design, 
construction 
and develop- 
ment of real es- 
tate projects. 
Not only would 
architects and 
construction 
managers share 
drawings and 
collaborate on 
building timeta- 
bles, but construction catalogs would 
also be available via a Web interface. 

Blueprints, e-mail threads, project 
folders and schedules were to be host- 
ed at a third-party site, setting the 
stage for the ASP model. 

But like an architect trying to reach 
for the stars before the foundation has 
set, Buzzsaw.com tried to cut through 
too many traditional tasks without 
having all the pieces in place. The 
company displayed the traditional dot- 
com characteristics: revolutionary 
thinking without regard for the rich 
history and well-defined practices of 
the profession. 

Autodesk Inc., which had a 40% stake 
in Buzzsaw.com, swallowed the entire 
company and its ASP model] last July. 

But now the future has caught up 
with the dream. 

Architects Skidmore, Owings & 
Merrill LLP use Autodesk’s Buzzsaw 
service to share drawings originally 
created in CAD applications. People in 
different offices mark up drawings, 
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check project changes and send up- 
dates to team members without resort- 
ing to FedEx tubes, faxes or copy ma- 
chines. There’s even a digital camera at 
a work site that transmits pictures to 
an enterprise portal, so people can 
check construction progress. 

Project managers don’t wait a day 
for drawings, and there’s less confu- 
sion about who’s supposed to sign off 
on changes. Just as similar project 
management software helps enterpris- 
es streamline the chain of responsibili- 
ty, using the ASP model for the build- 
ing industry cuts out a whole layer of 
indecision and downtime. 

But there remains a telling gap in the 
process. Municipal governments still 
don’t work in the digital world when it 
comes to approving building designs 
and changes. The reason most often 
cited is that the building industry has- 
n’t adopted this Web-based environ- 
ment in the critical mass necessary to 
force government’s hand. 

But this will change as large devel- 
opers such as Walt Disney use collabo- 
rative ASP technology to keep track of 
what is happening on-site as well as in 
the architect's office. 

The dream was real. The Internet 
radicals just didn’t give themselves 
enough time. D 


DAVID MOSCHELLA 
U.S.-Europe 
Rifts May 

Spill Into IT 


URING PRESIDENT 

Bush’s recent trip to 

Europe, it was hard to 
ignore the many rifts that 


seem to have opened between 
the U.S. and its most important politi- 
cal and economic allies. While dis- 
agreements with our friends in Europe 
are certainly not new, it’s now becom- 
ing increasingly likely that some of to- 
day’s antagonism will spill over into IT 
and Internet public policy issues. In- 
deed, serious IT policy disputes seem 
almost inevitable. 

The nature of the divide has become 
entirely too familiar. Much of the Euro- 
pean elite routinely characterizes the 
U.S. as arrogant, unilateralist, rash and 
unsophisticated. These criticisms tend 
to become particularly shrill whenever 
a Republican is in the White House. In 
contrast, many Americans believe that 


| ingly irrelevant were it not 


| the European emphasis on 


multilateral institutions and 
the complexities of culture 
and history is often really 
just an excuse for doing 
nothing, while having lots of 
long lunches in Geneva. 
These basic cultural 
stereotypes would be amus- 


for the fact that coordinated 
public policy is becoming an 
increasingly important IT in- 
dustry factor. Major differ 


| ences in regional policies, particularly 


in Internet-related areas, could easily 
become a serious barrier to global 
progress in technology. Consider the 
following three areas where the U.S. 


and Europe seem destined to disagree: 


Online privacy. The European Union 


| recently deemed the U.S. financial in- 


dustry’s “opt-out” privacy rules inade- 
quate and not in compliance with the 
EU’s “opt-in” requirements. The EU is 
also investigating whether Microsoft’s 
Passport Web authentication service 


| violates European privacy law. Other 
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potential areas of privacy 
policy disputes include 
spam, data retention re- 
quirements and cookies. 
Internet taxation. While 
Congress has consistently 
supported a moratorium on 
Internet sales taxes, the EU 
has decided otherwise. Ef- 
fective July 1, 2003, value- 
added taxes (VAT) will be 
applied to goods down- 
loaded over the Internet, in- 
cluding software, music and 
videos from U.S.-based companies. The 
Bush administration has complained 
and will likely raise the issue with both 
the Organisation for Economic Co-op- 
eration and Development and the 
World Trade Organization. In Europe, 
national VATs tend to add 15% to 25% to 
the prices of goods and services. 
Antitrust law. The wake-up call here 


; came last June, when, for the first time, 
| the EU rejected the proposed acquisi- 
| tion of Honeywell by General Electric, 


two U.S. companies. All signs suggest 


| 
| that the EU will also likely have its own 
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| view of the Microsoft antitrust situa- 
| tion. While U.S. courts have generally 
blessed Microsoft's software bundling, 
the EU is considering a requirement 
| that the Windows Media Player be sep- 
arated from Windows itself. 
Copyrights, patents, spectrum allo- 
cation and global positioning systems 
are other areas of potential future dis- 
agreement. What makes these disputes 
so volatile are the different IT situa- 
| tions on each side of the Atlantic. In 
many market segments, U.S. IT compa- 
nies are often much stronger than their 
European rivals, so the EU often has a 
relatively free hand to act. Certainly, 
| few tears will be shed in Europe for 
| any EU decisions that adversely affect 
U.S. firms. Even more worrisome, it’s 
often the stricter Internet policy that 
eventually prevails, since it’s difficult 
to have one set of rules in Europe and 
another in the U.S. If this pattern holds 
| true, much of the IT industry’s future 
will be determined in Brussels. Ouch! 
So, bridging the current cultural di- 
| vide may be more important than 
many of us realize. D 














Figuring ITAA’s Numbers 


HANK YOU, Patricia 

Keefe, for seeing 

what we techies have 
said all along: There is no 
shortage of programmers 
{QuickLink: 29632]. In the 


past, if someone had most of 


the skills needed, he could 
get hired, but nowadays, you 
have to have exactly what’s 
on the spec sheet. HR man- 
agers are looking for all of 
the skills, when the person 
can function with most of 
the skills. You write for 
Computerworld. Does that 
mean you don’t know how 
to write for Hot Rod maga- 
zine? You’re a reporter — 
the skill is there. You would 
just have to brush up on 
what you’re writing about. 
G.H. Nelson 

Birmingham, Ala. 


T’S IRONIC that this year 
the ITAA lowered its es- 
timate of new jobs to 
1.1 million. Last year, it esti- 
mated 1.6 million new IT 
jobs, yet we actually lost 
500,000. That is an error of 
2.1 million. Does this mean 


der further investigation, 
| you will find that he is spon- 


| lower IT salaries. 


| Figuring RO! Numbers 


| The drive to provide ROI 


| numbers and fuzzy logic, is 
| part of the overall trend to 
| evade responsibility for any 





we will lose 1 million jobs 
this year? I think the ITAA is 
like a weatherman who con- 
tinually forecasts rain. Un- 


| 
| 
| 
| 


sored by the umbrella manu- 
facturers’ lobby and that the 
ITAA is sponsored by indus- 
try groups that want to bring 
more H-1Bs into the U.S. to 


M. Powell 
Huntington Beach, Calif. 


WAS GLAD TO SEE the ar- 
i “The Fuzzier Side of 
-ROI” [QuickLink: 29281]. 


numbers, based on fuzzy 


downside of any decision. 
Investment in technology 
has two features. One is a re- 
turn horizon that’s longer 
than the technology horizon, | 
which defies sound ROI 
(usually applied to projects 
having returns within two 
years). The other is the re- 





turn to brand and customer 


perception going forward, 
which is inherently fuzzy. 
CEOs make bold decisions 


about their products and ser- | 
| vices based on their market- 


place knowledge and strate- 
gic expertise. Few of these 
have a sound ROI associated 


| with them. Suddenly, when 


technology comes into the 
picture, it’s scary voodoo. 
Driving the demand for 
ROI is the difficulty many 
technology company CEOs 
have making bold decisions, 
since they lack marketplace 
knowledge. There are three 
ways to explain it: shirking, 
cowardice or incompetence. 


All are ugly words, and easy 
| to confuse with simply being | 


wrong, which we all are 
from time to time. 


David Eaves, CEO 


| Internet Security Corp. 


Foster City, Calif. 


UR TECHNOLOGY 

consultancy recently 

conducted a survey 
on the productivity of IT de- 
partments for 100 companies 
in the U.S. and abroad and 
came up with an interesting 
revelation: Almost all of 


them stated that IT is a “util- 
ity” organization, like water, 
| gas or electricity. IT has a 
specific goal, to support 
business. It’s not a profit 
| center, but it’s not a cost 
center either. It’s an essen- 
| tial requirement to conduct 
| business. The success or 
failure of IT depends on 
| how well senior manage- 
| ment values information. 
| ROI isn’t a relevant metric 
these days. Senior manage- 
| ment and CIOs should stop 
| playing Wall Street. 
| Rocky Termanini 
Managing director 
International Consulting Group 
| Cheshire, Conn. 


| COMPUTERWORLD welcomes 

| comments from its readers. Letters 

| will be edited for brevity and clarity 
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PO Box 9171, 500 Old Connecticut 
Path, Framingham, Mass. 01701 
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IT POWER PLAY AT 
CALIFORNIA UTILITIES 


Investor-owned energy companies 
in the Golden State are turning to 
IT to re-energize an industry 
known more recently for sky-high 
prices and rolling blackouts than 
for good customer service or 
promising profits. PAGE 24 


C50: LOFTY TITLE, 
BUT LITTLE POWER 


Chief security officers may have a 
chief-level title, but they have little 
to show for it. Corporate politics, 
small staffs and growing friction 
between security chiefs and CIOs 
top the list of factors that render 
many CSOs ineffective. PAGE 28 


LET'S MAKE AN 
OUTSOURCING DEAL 


A tough economy and tight IT bud- 


gets are driving more users and 
vendors to the bargaining table, 
where fixed contracts are being 
shoved aside in favor of incentive- 
based pricing models. PAGE 30 


A Buyer's Market 


Here’s what the tough economic 
climate has done to the going hourly 
rate for project managers who work 
for outsourcing companies: 


$0 to $135 $85 to $t10 


SOURCE: DIGERAT! SOLUTIONS LLC. BABYLON. N ¥ 


CAREER ADVISER 


Fran Quittel offers advice to a net- 
working manager who wants to 
know what's in a title and to an IT 
worker whose company has de- 
layed salary reviews but is offering 
stock options instead. PAGE 39 


BUSINESS =” 


PEI 


3ART 


LKINS 


Disciplin by Design 


OOR BUYING DECISIONS cost your company more than money 

The size of your IT supplier portfolio demands that buying deck 

sions be made as part of a disciplined enterprisewide process, 

guided by your IT architecture. Without that, countless uncoor- 

dinated buying decisions will create an infrastructure that’s 
overly complex and too complicated to function effectively. 


In addition, infrastructure complexity requires 
many wrappers and black boxes to enable communi- 
cation among the various systems and databases. 

One new CIO, for instance, found 56 general 
ledgers in 14 data centers on 24 mainframe/midrange 
platforms. Another IT executive at the company de- 
scribed what had happened this way: “We built this 
one good decision at a time.” While each buying de- 
cision was good in isolation, the overall result was a 
disaster. 

For most companies, the architectures the !T staff 
designed to meet strategic imperatives are not the ar- 
chitectures their procurement processes are buying. 
Uncontrolled buying decisions sabotage the best ef- 
forts to deliver a specified architecture for the fol- 
lowing reasons: 

w@ There’s no defined process to coordinate thou- 
sands of buying decisions across the enterprise. 

@ The architecture and associated standards are 
rarely detailed enough to guide buying decisions. 
They don’t identify a specific product to be acquired 
or describe the trade-offs of using alternatives. 

gw Underscrutinized products are frequently ac- 
quired for high-priority projects in order to meet 
non-negotiable deadlines. 

@ Maverick buyers in IT and the rest of 
the business may contend that a weak 
process gives them the freedom to circum- 
vent architectural guidelines and acquire 
technology from a favored vendor. 

The buying process requires structure 
and discipline, much as development ef- 
forts require a systems development meth- 
odology. A buying-decision process estab- 
lishes a framework to coordinate acquisi- 
tions across the enterprise. It relies on ex 
plicit architectural guidelines and requires 
that all buying decisions be checked 
against them. It defines consistent deliver- 
ables (such as standard contract terms and 
conditions) and requires stakeholder par- 
ticipation. 

This process unifies the IT architecture 
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and its underlying infrastructure and provides the 
only effective screen to block products and services 
that don’t adhere to your architecture. 

To make your buying-decision process successful, 
you'll need to do the following: 

@ Sell the importance of buying well to the organization. IT 
and the rest of the business often focus on creating 
the next application. You must remind executives 
that most of the applications will be purchased rather 
than developed in-house. Buying decisions have be- 
come a significant part of the development process. 

@ Get support from all CXOs. A buying-decision process 
can be successful only if enforced consistently across 
the enterprise. 

@ Get the CIO to control the process. Nobody is better 
positioned to view the IT architecture and its impact 
on the business. The CIO has ultimate responsibility 
for ensuring that buying decisions support the archi- 
tecture. 

w Create a centralized team to manage the buying process 
and assist those making decisions. This team, typically 
made up of IT staff, may include representatives 
from other divisions, such as purchasing or legal. 

@ Provide economic incentives. Most buyers will help if 
there’s something in it for them, such as 
cost savings. For example, buyers purchas- 
ing a desktop office suite in a separate busi- 
ness unit will care far more about conform- 
ing to the corporate architecture if it en- 
ables them to buy that suite at a lower cost 
per seat. 

Your infrastructure is the direct result of 
your buying decisions. 

Without a consistent buying process, 
these decisions will be made without the 
necessary architectural guidance. You'll ac- 
quire applications, technologies and ser- 
vices that you never intended and some that 
you really shouldn’t own. 

If you consistently buy well, you'll have a 
chance to realize the architecture you de- 
signed. Buy unconsciously, and you'll get 
the architecture you deserve. D 
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Now that the energy crisis has eased, 


' the state’s three investor-owned 
‘utilities are pushing ahead with big IT 


projects to secure their own futures. 
By Melissa Solomon 


T AIN'T OVER YET. The lights are 
back on and prices have stabi- 
lized, but political and regulatory 
hurdles are still fueling the fires 
in California’s energy industry. 
At issue are details that could dra- 
matically alter the way the industry is 
structured, including the reorganiza- 
tion of Pacific Gas & Electric Co. 
(PG&E), the design of the state’s pow- 


| er market grid and an uncomfortably 


modest energy reserve. 


Re-Energizi 


Califo 


= September 1996: Gov. Pete Wil- : 


THE MARCH 
THROUGH 
THE CRISIS. 


| 
| 


“Don’t let me lull you into the idea 
that we still aren’t tight on supply in 
California,” says Terry Winter, president 
and CEO of the California Independent 
System Operator (ISO), which controls 
the state’s power grid. “We are.” 

But through it all, the state’s three 
investor-owned utilities are trying to 
press on with business as usual and plan 
for life after the crisis. And IT plays a 
key role in each company’s plans. 

Southern California Edison (SCE) is 
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| ona full-scale mission to simplify its 
IT infrastructure while exploring 
emerging technologies such as mobile 
field service systems. San Diego Gas & 
Electric (SDG&E) has plans to inte- 
grate its operations with Los Angeles- 
based Southern California Gas Co., 
which is also owned by SDG&E’s par- 
ent company, San Diego-based Sempra 
Energy. And PG&E is undergoing a se- 
ries of upgrades and replacements — 
including new customer information 
and enterprise application integration 
(EAI) systems, as well as nine rebuilt 
customer-care applications — all by 
the end of the summer. 

Following is a look at how two debt- 
riddled companies, PG&E and SCE, are 
managing those changes in the midst 
of a still-turbulent market. (Because 
SDG&E had sold off its stranded as- 
sets, it was exempt from the retail 
price caps that prevented PG&E and 
SCE from raising customers’ bills 
when wholesale prices spiked; there- 
fore, it didn’t face the same crippling 
debt as its counterparts.) 

Regardless of the challenges, the utili- 
ties have some outdated IT systems, 
such as billing and customer informa- 
tion, that are mission-critical, so they 
have little choice but to concentrate on 
strengthening their infrastructures, says 
lim Walker, senior energy analyst at For- 
rester Research Inc. in Cambridge, Mass. 

“The most important thing is to get a 
bill out every month and make sure it’s 
accurate,” he says. “But that’s easier 
said than done when the tariffs keep 
changing.” 


Striving for Simplicity 
It wasn’t just California residents and 
businesses that were left in the dark 
during last year’s rolling blackouts. 
State officials handed down a steady 


son signs a bill to open the state 
electricity market to competition. 


& March 1998: State’s wholesale 
electricity markets open. 


: eration plants, making it exempt 
: from consumer price caps or- 

: dered under deregulation law. As 
: retail prices rise with wholesale 
: prices, customers’ rates triple 

> over the next year. 


the month average $61 per mega- : 
> watt-hour (MWh), up from 1998 
: and 1999 averages of $33. 


The California ISO declares the 


> first of many Stage 2 emergen- 
: cies (when energy reserves fall 
> below 5%). 

am July 1999: SDG&E selis its gen- : 

: m June 2000: Average monthly 
: energy costs climb to $167/MWh. 
: Rolling blackouts are orderedin = 
: San Francisco during a heat wave. : 


: @ September 2000: The CPUC 
: : caps rates for San Diego cus- 
: m= May 2000: Total energy costs for : 


tomers for three years. 


Mid 





« December 2000: Average 


> monthly energy costs skyrocket to 
: $317/MWh. The ISO declares the: 
: first of many Stage 3 emergencies : 
> (when reserves fall below 1.5%). 
: The Federal Energy Regulatory 

> Commission (FERC) orders a soft 
: price cap of $150/MWh, effective 
: through April 2001. 


The Clinton administration 


stream of emergency orders aimed at 


: ing to ensure reasonabie whole- 
: sale electricity rates. 


= Jan. 2001: The credit ratings 


> of PG&E and SCE are downgraded 
> to junk status, and the CPUC ap- 
: proves temporary rate increases 
> of 7% to 15% for PG&E and SCE 
: customers. The ISO orders rolling 
: : blackouts in northern and central 
: invokes emergency orders to force - 
generators to sell power in Califor- : 
: nia after they refuse state utilities: 
: on the grounds that they're credit 
> risks. SCE, later joined by Gov. : 
: Gray Davis, sues the FERC for fail- : 


California. 
The Bush administration ex- 


: tends an emergency order forcing 
* power companies to sell to Cali- 
: fornia but warns that it’s the last 


extension. 








COMPUTERWORLD June 10, 2002 


~ BUSINESSMA 


AS THE ENERGY CRISIS EASES, SCE CIO Mahvash Yazdi has big plans for the future 
aeRO RUC EUR Ur ala Mem Umm OT mcm CM mel mer. 


gaining control during the energy cri- 
sis. “Every regulatory decision that 
was made had [an IT] systems implica- 
tion,” says Mahvash Yazdi, CIO at Edison 
International and SCE, its utility sub- 
sidiary, both in Rosemead, Calif. 

For instance, when the state ordered 
tiered rates and discounts to encour- 


= February 2001: The California 
Department of Water Resources 
(DWR) uses state bonds to begin 
buying energy (effective through 
December 2002) for the state’s 
three investor-owned utilities. 
The DWR signs more than 50 
long-term power deals to build 
the state’s reserves. 


= March 2001: The state ap- 
proves major retail customer rate 
increases. The first statewide 
rolling blackouts are declared dur- 
ing a Stage 3 emergency. 

The ISO asks the FERC to in- 
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age lower energy consumption, SCE 
had to reprogram its billing systems to 
reflect the complex rate structure. Try- 
ing to get a leg up on the June 2001 
deadline, SCE’s IT department worked 
around the clock to write the new 
code, with help from its offshore devel- 
opment center in India. But the rates 


: California's price cap to spot mar- 
ket sales in California and the 10 
states within the Western Sys- 
tems Coordinating Council. 
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@ September 2001: PG&E files its 
bankruptcy reorganization plan. 


@ October 2001: Retail market 
choice is suspended in California. 


@ January 2002: California's at- 
torney yeneral files suit against 
PG&E, claiming it diverted billions 
from its regulated utility into un- 
regulated affiliates. The compa- 





kept changing and the code had to be 
revised continually. 

“The third time was a charm, and we 
met the date, but we would not have 
been able to do that without our suppli- 


| ers,” including the offshore program- 
| ming firm, says Jodi Collins, director of 


IT application services at SCE. “I can’t 
think of one piece of IT that didn’t get 


| tried through this period.” 


SCE’s IT leaders realize that while 
they made it through the worst, they 


| need to sharpen the firm’s infrastruc- 
| ture so it can more easily adapt to fu- 
| ture adversity. 


“We need to... become more agile,” 
says Yazdi. “And we also need to sim- 
plify our environment so that we have 
fewer ... more capable applications.” 

“Simplify” has become the mantra of 


| SCE’s IT department. But with 1,050 IT 
| employees, 1,000 servers, 38TB of data, 


700 applications and more than 70 mil- 
iion lines of code, the utility’s IT lead- 


ers have been challenged just to get 


their arms around their infrastructure. 
“We're talking about a huge portfo- 
lio,” says Collins. “So we have redun- 


| dancy, we have technology that’s out- 
| lived its usefulness, we have areas 
where we have gaps in the technology.” 


| Call to Action 


As it turned out, one of SCE’s simpli- 
fication projects, its call center opti- 
mization effort, was actually buoyed 
by the energy crisis. 

“We were starting the project when 
the energy crisis hit,” says Collins. “At 
that time, we found this project to be 
on the critical path because of the del- 
uge of calls coming in.” 

The new system reduced the num- 
ber of screens operators used by 
one-third, and it added a caller ID 
and telephony/automatic routing 
system from Westlake, Calif.-based 


‘ 
f 
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Genesis Data Networks. 
Collins’ team shaved sever 
off the project so the system would be 
ready within a week after a new round 
of energy bills went out. Since then, 
SCE has cut its call center by 80 em- 
ployees, trimmed 30 to 40 seconds off 
call times and seen a return of $3 mil- 
lion per year on the $6 million project, 


il months 


says Collins. 

SCE is now in the midst of upgrad- 
ing to Windows XP from a predomi- 
nantly Windows 95 environment (a 
small percentage of employees use 
Windows 98), with a plan to begin de- 
ployment on more than 15,000 desk- 
tops in November. The upgrade should 
take about a year and a half, says Mike 
Pinter, director of IT infrastructure 
services. As various IT contracts come 
due, SCE is also looking to reduce the 
number of vendors it uses, he adds. 

But as the utility looks to simplify its 
infrastructure, it’s simultaneously try- 
ing to stay on top of emerging tech- 
nologies, says Solomon Tessema, di- 
rector of IT enterprise architecture 
and telecommunications and program 
manager of mobility strategy at SCE. 
Tessema says mobile computing will 
be the most important technology 
trend during the next five to 10 years, 
so he has created an enterprise mobili- 
ty strategy program in which senior 
business unit leaders throughout the 
company are examining mobile de- 
vices, networks, requirements and sys- 
tems integration strategies. 

The list goes on. SCE’s capital IT 
budget is up 30% from last year’s and 
is expected to rise 13% in 2003, but 
when asked if all the plans are within 
SCE’s reach, Yazdi doesn’t hesitate. 
“No,” she says. Specific projects that 
are already in the works have gone 
through an extensive ROI review, she 

Continued on page 26 


= March 2002: PG&E files its sec- 
ond revised reorganization plan. A 
U.S. Bankruptcy Court judge sets a 
June 17 date for PG&E's creditors 
to review rival plans from the utili- 
ty and the CPUC. 


. 


@ April 2002: The CPUC submits 
a plan to restructure PG&E to fed- 
eral bankruptcy court. PG&E de- 
nounces the plan. 

The Foundation for Taxpayer 
and Consumer Rights, which tried 
to block the CPUC pian by filing a 
petition with the state Supreme 

Continued on page 26 
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Re-Energizing 


California 


Continued from page 25 
explains, but she’s had to cancel or 
postpone other projects. 

“Financially, we certainly have been 
impacted by the energy crisis, and we 
have to prioritize where we’re spend- 
ing our dollars,” Yazdi says. 


‘Fast Dinosaur’ 

After years of beatings in the press, a 
Chapter ll bankruptcy protection filing 
and a stack of lawsuits, PG&E’s IT de- 
partment isn’t shooting for Space Age 
sophistication. 

“Our goal is to be a fast dinosaur. Or 
a slow mammal,” says Roger Gray, CIO 
at the San Francisco-based utility. 

Actually, the primary goal has been 
the same for several years, says Gray: to 
replace PG&E's customer information 
system (CIS). “It’s our megasystem,” he 
says. But every time he tried to replace 
the homegrown CIS, deregulation and 
the energy crisis put his plans on hold. 

Getting the old system ready for 
deregulation was like trying to turn a 
67 Chevy into a rocket sled, he says. 
But after years of tweaks and upgrades, 
the system has finally reached the end 
of its shelf life, says Gray. 

“Whether we're in bankruptcy or not, 
we needed to replace the systems,” says 
Gray, who adds that PG&E is now in the 
process of implementing a CIS platform 
built around San Francisco-based SPL 
WorldGroup Inc.’s CorDaptix product. 

A smart move, says Walker. As PG&E’s 
legacy system ages, the market is grow- 


Continued from page 25 
Court, says the CPUC’s plan ille- 
gally proposed to maintain ex- 


from $15 billion to $11.4 billion. 
State energy officials warn that 
energy supplies could be at risk if 
plans to build power production 
plants are dropped or postponed. 
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@ May 1, 2002: The ISO submits 
a plan for a revised market to the 
FERC, calling for extended price 
caps. Class-action lawsuits pile 
up on behalf of customers who 
want their money back from ener- 
Gy companies that inflated prices. 


@ May 6, 2002: internal Enron 
Corp. documents released by the 
FERC reveal that Enron traders 
created false congestion on Cali- 
fornia’s power transmission grid. 


@ May 16, 2002: The CPUC or- 
ders public hearings on SDG&E 
attempts to settle a dispute with 
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| ing more complex, prompting the need 
for a more sophisticated system. 

The utility is also installing an EAI 
system from Monrovia, Calif.-based 
SeeBeyond Technology Corp. That 
system, along with the CIS, is sched- 
uled to go live at the end of the sum- 
mer. In addition, PG&E is planning to 
launch a new human resources/payrolli 
system next year and is pushing for- 
ward with a series of ongoing projects 
and upgrades. 

Most of the projects, such as the new 
CIS, EAI and finance systems, will re- 
place mission-critical systems that were 
| designed for a utility that had little in- 
teraction with the public and never 
dealt with outside companies. And as 
PG&E competes for cus- 
tomers, it must, for the first 
time in its history, think 
about how to sharpen its cus- 
tomer service tools and oper- 
ate more efficiently. 

“We're spending more mon- 
ey this year on IT than I think 
we have in recent years,” says 
Gray, who added that he’s hir- 
| ing more workers this year. 
| PG&E’s 2002 IT budget of 
| $350 million is expected to 

rise by $25 million and then return to 
normal in 2003, he says. “We’ve got so 
much work stacked up that we're literal- 
| ly working 24 hours,” he notes. 
But as PG&E attempts to emerge 
| from Chapter Il, various unknowns cre- 
ate an assortment of logistical hurdles 
| for its IT department. PG&E has spent 
| much of this year duking it out in fed- 
eral bankruptcy court with the Califor- 
nia Public Utilities Commission (CPUC) 
over competing plans to reorganize 
PG&E. If it gets its way, PG&E Corp. 
| and its utility subsidiary will be split 
| into unaffiliated companies, with elec- 
| tric and gas distribution run by the 
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Roger Gray, 
CIO at PG&E 





the commission over whether it 
must return to retail customers 
the $425 million in profits it made 
during the energy crisis. 


@ May 21, 2002: After CMS 
Energy Corp., Reliant Resources 
Inc. and Williams Co. admit to en- 
gaging in bogus trades to drive up 
their revenues, causing the Secu- 
rities and Exchange Commission 
to widen investigations into ener- 
ay industry trading, the FERC or- 
ders 150 energy producers to sub- 
mit affidavits stating whether they 
participated in “wash trades.” 
State Sen. Joe Dunn (D-Garden 


utility and electric and gas transmis- 

sions and electric generation con- 

trolled by the parent corporation. 
Under this arrangement, about 80% 


| of the IT department would go to the 


distribution firm, and the remaining 
20% would serve the transmission and 
generation operations, explains Gray. 
He says he’s not too worried about re- 
assigning staff; the hard part is break- 


| ing up the systems and processes that 


were, in many cases, brought together 
when IT operations were centralized 
just a few years ago. 

“I’m not sure if breaking companies 
up or merging them is easier,” says Gray. 
Take the utility’s computer lab, for 
instance. It’s in the midst of replacing 
4,000 of its 20,000 desktop 

computers from a variety 
of vendors with 1.5GB PCs 
from Dell Computer Corp., 
explains Ron Dodson, a 
PG&E telecommunica- 
tions technician. Mean- 
while, PG&E is migrating 
from Windows NT to 
Windows 2000. 
Workstation upgrades 
used to be handled by indi- 
vidual department, accord- 
ing to Anna Carrancho, supervisor of 
computer telecommunications ser- 
vices for maintenance and operations. 
When PG&E centralized IT support 


| two years ago, workers there feared 


that they’d never get new computers 
due to bureaucracy. But employees are 
finally starting to prefer the central- 


| ized approach, Carrancho says 


PG&E's central network and testing 
groups are in the midst of consolidat- 
ing its SQL servers into a Dell storage- 
area network and replacing PG&E’s 


| old analog systems with microwave 
| networks. The analog backbones, 


which don’t have the capacity to sup- 
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lect Committee to Investigate Price 
Manipulation of the Wholesale En- 
ergy Market, accuses the California 
[SO of asking traders to buy more 
power than was needed at above- 
market rates in November 2001. 
The ISO forms a special committee 
and hires an independent investi- 
gator to look into the charges. 


m May 24, 2002: CMS Chairman 
and CEO William McCormick resigns. 


m May 30, 2002: Lockyer files 
lawsuits against eight more ener- 
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port today’s data systems, should be 
fully retired by 2004 or 2005, says Jeff 
Bennett, manager of network planning. 

As these and other projects get un- 
der way, PG&E’s round-the-clock 
Transmission Operations Center 
(TOC) has been trying to stay on top of 
its day-to-day work while coping with 
both internal and external changes. 

The TOC communicates with the 
state ISO, which has controlled Cali- 
fornia’s power grid since deregulation 
took effect in 1998. The ISO collects 
needed load and generation informa- 
tion from the various players in the 
state’s energy industry to make sure 
supplies meet demand. 

So unlike the other units within 
PG&E's IT division, the TOC hasn’t 
been able to move forward with a sys- 
tems overhaul because it must follow 
the ISO’s lead — a situation foreign to 
a utility that has always operated inde- 
pendently. And to further complicate 
matters, even the ISO, which has yet to 
master the complex market, is unclear 
about its future vision for the systems 
that control the state’s power grid. 

“It’s a feast-or-famine situation,” 
says Steve MacCool, TOC lead senior 
systems dispatcher. 

On May 1, the ISO submitted a 
market redesign plan to the Federal 
Energy Regulatory Commission. 

But “there are still a lot of uncer- 
tainties that need to be worked out,” 
acknowledged Lorenzo Kristov, the 
ISO’s manager of market design, dur- 
ing a recent press conference. D 


ONGOING CHANGE 


As SDG&E tackles the lingering effects from the 
California energy crisis, it's planning an operational 
integration with Southern California Gas that will 
affect IT for years to come 
QuickLink: 30335 
www.computerworld.com 





@ June 3, 2002: The U.S. 
Supreme Court deals a defeat 
to Davis, ruling that the whole- 
sale power contracts he took 
control of when state utilities 
could no longer honor them 
should have been voided. A hear- 
ing will determine how much the 
state must reimburse Charlotte, 
N.C.-based Duke Energy Corp., 
which brought the case before 
the high court. 


= October 2002: FERC-ordered 
price caps are scheduled to end; 
the FERC is scheduled to decide 
on an ISO redesign plan. 
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HE EXODUS BEGAN IN DECEMBER 
Bruce Moulton, vice president of infra- 
structure risk management at Fidelity 
Investments in Boston, was let go. 
That same month, Steve Katz, chief se- 
curity and privacy officer at Merrill 
Lynch & Co. in New York, accepted a 
buyout. And in April, shortly after his 
face appeared on the cover of CIO magazine, Mich- 
ael Young, chief information security officer and 
principal privacy officer at State Street Global Advi- 
sors in Boston, lost his job in a company reshuffle. 

The departure of these and other information se- 
curity veterans from Fortune 500 companies reflects 
the beginning of turbulent times for chief security 
officers (CSO). Since Sept. ll, CSOs have faced new 
pressures to prove the value and effectiveness of 
their security measures, even as they struggle politi- 
cally for legitimacy within their corporations and for 
support from the technology and business units 
they’re trying to protect, say analysts. 

“We’re in a transition period, and the smart [CSOs] 
are getting out of the way,” says David Foote, presi- 
dent and chief research officer at Foote Partners LLC, 
a management consultancy and IT job research firm 
in New Canaan, Conn. “They see the risks in trying 
to build in the next phase of security — moving from 
fragmented delivery of security technology to a coor- 
dinated, aggressive, well-conceived security program. 

“They understand how long it takes to build atten- 
tion and change the culture to make this next step, 
but they’re not getting the support they need to 
brand and build this next level of security,” says 
Foote, who is also a Computerworld columnist. 


Uphill Battle 


Corporate politics is the single biggest problem 
facing CSOs, according to some who hold such posi- 
tions and industry analysts. Even though CSOs have 
attained a chief-level title, they report that they still 
generally lack enough power to be iruly effective. 
And there’s growing friction between the CSO, who 
usually has only a handful of people on staff, and the 
CIO, who has hundreds or, in some cases, thousands 
of people on staff, says John Pescatore, a security re- 
search analyst at Gartner Inc. in Stamford, Conn. 

Because of these conflicts and the expanding role 
of information protection to encompass privacy, reg- 
ulatory compliance and disaster recovery, firms gen- 
uinely don’t know where to put the function of infor- 
mation security — if they have a formal management 
function at all, says Tracy Lenzner, CEO of executive 
security search firm Lenzner Group in Las Vegas. In 
fact, only 54% of 72 chief executives working for com- 
panies with at least $1 billion in annual revenues said 
they have a CSO in place, according to a survey re- 
leased in January by technology and strategy consult- 
ing firm Booz Allen & Hamilton Inc. in McLean, Va. 

“Unfortunately, for many organizations I think that 
the executive-level positioning of CSOs will be 
heightened only when we’re hit with a catastrophic 
event,” Lenzner adds. 

Thav’s also the consensus among the unemployed 


THE DEPARTURE OF STEVE KATZ (right) from Merrill 
Lynch is a reflection of the increasing focus on the techni- 
cal aspects of security. 


| 
| 
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and employed CSOs who were interviewed for this 
story, all of whom say information protection has al- 
ways been an uphill battle because it’s difficult to 
prove its value unless a catastrophe occurs. As such, 
CSOs lack the power to do more than set policies 
and put out fires, says a CSO from a Fortune 100 
technology equipment manufacturer who asked to 
remain anonymous. 

“The greatest threat we face is the belief of senior 
management that there is no threat. So we don’t get 
funds, money or resources, and without those things, 
you can never address security threats and risks,” 
says another security officer at a global financial 
firm who’s planning his exit strategy and starting a 
consulting practice. 

Young says he believes some of these problems 
can be lessened if CSOs get on board with business 
initiatives and competitive strategies more consis- 
tently. “As a whole, CSOs still express security in 
technical terms instead of business terms,” he says. 

Katz, Young and Moulton, however, all speak the 
language of business and have driven information 
risk management throughout their former organiza- 


NG 
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tions. (As for his business savvy, Moulton thinks he 
might have worked himself out of a job by integrat- 
ing security ownership into the business units them- 
selves.) Similarly, Katz looks at security from the 
standpoint of business enablement, adding that risk 
management methodologies are no different from 
other processes of building business risk models for 
nontechnical offerings. 

Another view of this upheaval in security leader- 
ship is that Katz, Young and Moulton have complet- 
ed their work of championing security. They have 
laid the critical groundwork by building consensus; 
establishing best practices and awareness; and 
preparing business and technology units for compli- 
| ance, liability, security audits and procedural foren- 
sics investigations. Now Katz and Young are offering 
these start-up services to smaller companies and 
home offices through consulting businesses, a path 
Moulton says he might also take. 

The next phase of information protection involves 
becoming more technical in focus, say analysts. 

“In the past, we measured our success by telling 
| about the programs we put in place and the policies 
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we wrote. As we move forward, it’s more about how 
well those policies are being implemented, how se- 
cure the systems are and what impact they’re hav- 
ing,” says Michael Ressler, director of security ser 
vices at New York-based IT consulting firm Predic- 
tive Systems Inc. “And that means more technical 
background is needed for security management.” 

Booz Allen’s survey cites three areas that chief 
executives are more focused on since Sept. 1: 

w Seventy-five percent of respondents 
said they’re more concerned with infra- 
structure protection. 

w Seventy-one percent said they’re 
more concerned with risk assessment. 

w Sixty-nine percent said they’re con- 
cerned about employee morale. At one 


Fortune 100 technology manufacturer, low morale is 


already translating into abuses by employees, ac- 
cording to its CSO, who says pornography Web surf- 
ing at the company is up 40%. 

If Katz’s replacement is any indication, some firms 
are already catching on to this more technical focus. 
Merrill Lynch’s new chief of security and privacy, 


| 
| 
| 
| 


WHATS IN A TITLE? 


Executives with other titles also 
bear heavy responsibility for 
information security 

@ QuickLink: 30163 
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David Bauer, has a highly technical background, as he | 


was in charge of network management and engineer- 
ing, including security engineering, at Morgan Stan- 
ley Dean Witter & Co. and then at Deutsche Bank. 


But even with the best technology project manage- | 


ment and business skills, these new technobusiness, 
security hybrids will run into all the same empower- 
ment problems as their forerunners, says Thornton 
May, a senior member of executive advisory firm 
Toffler Associates Inc. in Manchester, 
Mass., and a Computerworld columnist. 
To survive this upheaval, security execu- 
tives must be strong in business and 
technology, he adds. 

“Security professionals will need to 
which is accounting,” he says. “They also have to be 
able to understand how the network works, how the 
application works and how the hardware works if 
they’re to mobilize the security organization. Then 
they need to align their security strategy to where 
the business is going and tone their architecture and 


deployment to fit the financial plan of the company.” D | 


The exodus of some renowned 
security executives marks the 
beginning of turbulent times 
for CSOs. By Deborah Radcliff 


CHIEF 
SECURITY 


OFFICER 


understand the lingua franca of business, | 


MISSIONS AND 
MINEFIELDS 


Key issues facing CSOs: 
@ Ongoing friction between the ClO, whose mis- 
sion is to make the network hum while running 
large departments, and the CSO, who is seen as 
a business inhibitor and has only a handful of di- 
rect reports 


@ Lack of empowerment to get things done 
@ Flat budgets and increased security threats 


@ New demand to prove the effectiveness of 
security programs 


@ Mergers and acquisitions 


@ Increased physical security concerms as a re- 
sult of the Sept. 11 terrorist attacks, which affect 
CSOs who have oversight for physical security 

as well as other CSOs who implement the tech- 
nological solutions to mitigate such risks 


What CSOs need 


to do to be effective: 

= Form relationships and strategic alliances with 
corporate influencers in business units and in 
the auditing, IT and legal departments. 

@ Become business enablers by using security 
technologies that reduce overhead, provide bet- 
ter service and otherwise support business 
processes with better, faster and cheaper ways 
of getting things done. 

@ Jake advantage of new assessment and 
benchmarking tools to help report the compa- 
ny’s overall security posture, risk modeling and 
program effectiveness. (For more information, 
watch for our upcoming Knowledge Center on 
security in July.) 

@ Take accounting and business courses and 
get the Certification for Information System 
Security Professionals. 

@ Keep abreast of regulatory issues and bills 
before Congress. 

@ Be impeccable in appearance, articulation, 
writing and other forms of presentation. 


SOURCES: Tracy Lenzner, founder of executive security 
recruitment firm Lenzner Group (www.lenznergroup. 
com), John Pescatore, an analyst at Gartner (www. 
gartner.com), Mike Hager, vice president of network se- 
curity and disasier recovery at OppenheimerFunds Dis- 
tributor Inc. in New York; and the research report “How 
Corporate Security Is Reshaping the Post-9/11 CEO Agen- 
da,” by Booz Allen & Hamilton. 





Wrangling 
Lucrative 


Deals With 
Integrators 


Customers are shifting away from traditional 
fixed-price and time-and-material contracts to 
more flexible transaction and incentive-based 
pricing structures. By Jaikumar Vijayan 


ITH COST a primary dri- 
ver behind many out- 
sourcing arrangements 
these days, a growing 
number of customers are 
shifting away from traditional fixed- 
price and time-and-material contracts 
to more flexible transaction and incen- 
tive-based pricing structures 

“There is a much greater sophistica- 
tion in contract management and ne- 
gotiations by users” than ever 
before, says Neal Dittersdorf, a 
partner at Washington-based law 
firm Venable, Baetjer, Howard & 
Civiletti LLP. 

The most visible change in contracts 
with integrators is taking place on the 
pricing front, Dittersdorf says. Service 
providers are becoming more flexible 
in the way they package and price 
deals 

Driving many of the changes is the 
tough economic climate, says David C. 
Hollingsworth, director of enterprise 
applications at Watson Wyatt World- 
wide, a human resources management 
firm in Washington. 

“Vendors that were very cost-pro- 
hibitive for us in the past are coming 
back with completely revamped pro- 
posals to make sure they can at least 
get in the door,” Hollingsworth says. 

For instance, a proposal for a data 


backup service that Watson Wyatt 
previously rejected as too expensive 
became more palatable after the ven- 
dor recently offered the same service 
using a more cost-effective technology, 
Hollingsworth says. 


| Tumbling Rates 


The slowdown in IT spending is 
putting considerable pressure on ven- 
dors to drop prices while delivering 

the same service levels as 

before, says Juergen Rottler, a 

vice president at Hewlett- 

Packard Co.'s services group. 

Contract workers are settling 

for 20% to 30% lower rates for certain 
job skills these days compared with 
2000, says Dan Hoffman, CEO of 
Digerati Solutions LLC, a Babylon, 
N.Y.-based systems integrator that pro 
vides engineering, desktop and project 
management contractors to financial 
services firms (see chart). 

“Many [IT workers} have been laid 
off, so there’s a surplus of resources. 
Companies are taking this as an oppor- 
tunity to negotiate more extensively on 
prices,” Hoffman says. 

Customers are also beginning to 
more closely scrutinize the financial 
stability and viability of the companies 
they’re interested in partnering with — 
not only before they sign on but also 
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during the course of a contract. 

“We are looking a lot more closely at 
vendor funding and stability,” Hol- 
lingsworth says. This means a lot more 


face-to-face communications and insis- | 


tence on getting details of new busi- 
ness plans and ventures. 

Here are some other factors that IT 
managers and analysts suggest consid- 
ering when negotiating contracts with 
systems integrators: 

= There’s no such thing as a one-size-fits- 
all pricing model. Be prepared to mix and 
match as needed and choose wisely. 

It’s an approach that Nielsen Media 
Research in New York is considering 
for a long-term application outsourc- 
ing project with Cognizant Technology 
Solutions in Teaneck, N,J., to develop a 
data management system. 

In structuring the contract, Nielsen 
is breaking the project into three phas- 
es — development, enhancement and 
maintenance, says CIO Kim Ross. 

The first phase will be executed on a 
fixed-price basis, while the other two 
are likely to be structured under a vari- 
able, transaction-based model. Both 
parties are trying to estimate the cost 
of ongoing enhancements and main- 
tenance, he says. But “the future phas- 
es are not legally bound,” Ross says. 
This makes the contract more open- 
ended and flexible for both parties, 
Ross says. 

= Use service-level agreements and other 


| quantifiable measures to make sure projects 
are being delivered on time and within 


scope. 

Nielsen, for instance, uses a tech- 
nique called Function Point Analysis 
for estimating project size, managing 
change of scope and communicating 
functional requirements with Cog- 
nizant. 

Nielsen may give Cognizant a proj- 
ect to develop a system with 2,000 in- 
dividual functional points to develop, 
maintain and enhance. It then uses 
productivity modeling tools to esti- 
mate project requirements. 

The approach gives both Cognizant 
and Nielsen hard numbers to base 
pricing on and to measure perfor- 
mance against, Ross says. 

= Have provisions that clearly spell out 
what happens to intellectual property and 
shared software and hardware in case a re- 
lationship has to end, attorney Dittersdorf 
says. 

= When it comes to offshore outsourcing, 
choose the right applications to outsource 
and maintain constant communication with 
your vendor, says Jim Beattie, chief tech- 
nology officer at CCC Information Ser- 
vices Inc., a Chicago-based provider of 
networking services to the auto indus- 





Reales for Techs 


FIELD TECH: Responsibilities include 
maintenance and operational support for 
all desktops. 


RATE 
Spring 2000: $45 to $55 per hour 
Spring 2002: $30 to $40 per hour 


SYSTEMS ENGINEER: Responsible for 
planning and engineering of LAN/WAN 
infrastructure. 


RATE 
Spring 2000: $110 to $150 per hour 
Spring 2002: $85 to $110 per hour 


PROJECT ENGINEER - 
INFRASTRUCTURE: Duties include sup- 
porting project design activities for data 
and telecommunications infrastructure. 


RATE 
Spring 2000: $100 to $125 per hour 
Spring 2002: $75 to $100 per hour 


PROJECT MANAGER: Responsible for 
the management of large and complex 
projects. This person plans and coordi- 
nates project activities in terms of sched- 
ule, performance and cost. 


RATE 
Spring 2000: $110 to $135 per hour 
Spring 2002: $85 to $110 per hour 


SOURCE: DIGERATI SOLUTIONS LLC, BABYLON, N.Y. 


try. Projects that involve short lead 
times or a high degree of collaborative 
effort between different business units 
aren’t the best candidates to ship over- 
seas. Those projects with longer devel- 
opment cycles make more sense to 
send abroad, he says. 

= Incentive-based pricing models benefit 
both parties. For instance, an outsourc- 
ing vendor that gets paid by the num- 
ber of help desk incidents it responds 
to every month will have little incen- 
tive to reduce the number of calls it 
fields — even if that would ultimately 
reduce its customer support costs, says 
Steve Dauber, a vice president at New 
York-based outsourcer Center Beam 
Inc. 

But under a fixed-price model, says 
Dauber, the vendor makes money only 
by designing out underlying problems 
and reducing the number of help desk 
calls — a scenario that benefits both 
parties. 

Says Dauber, “Instead of paying for 
activity, pay for results.” D 
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Lotus. software 


WINNING TAKES MORE 
THAN TEAM CHEMISTRY. 


IT TAKES TEAM SOFTWARE. 
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Team communication is everything. Lotus collaboration software, with online meeting spaces and secure corporate 
instant messaging, makes communication instant, so every project goes down in the “win” column. Lotus. Part of our 
winning software team, along with DB2? Tivoli? and WebSphere’ Check out our Webcast at ibm.com/lotus/team 
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IN THIS GAME, THERE 
CAN BE NO TIMEOUTS. 
NO DELAYS. NO STOPPAGE. 


e-business. It's the only game in town. And downtime means losing profits and opportunities, so you 
can't let it happen. IBM Tivoli software lets you predict the business impact of the technology you're 
responsible for, so that you can make smarter decisions today. Tivoli. Part of our winning software team, 
along with DB2° Lotus’ and WebSphere’ To find out more view our Webcast at ibm.com/tivoli/smarter 
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DB2 ROCKS WHEN 
iT COMES TO UNIX 
LINUX. WINDOWS. 
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Benchmarks prove it. Customers swear by it. DB2 is a better distributed database than Oracle. Not to mention 
more manageable and more affordable. And because it can work across any platform, it’s the perfect 
database for companies large, small, and growing. DB2. Part of our winning software team, along with 
Lotus? Tivoli® and WebSphere? Check out the benchmarks and get a free TCO report at ibm.com/db2/rocks 
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WORKSTYLES 


IIs a Partner in 
Helping Scotts Grow 


culture of IT at your company? “We’re 
a fairly casual organization — 
there’s some formality, but we’re 
not bureaucratic by any stretch. 
We're very business-oriented — 
whereas the old environment was 
custom-programming, the new 
environment is package-oriented, 
so we don’t have any hard-core 
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“For example, we have a guy in 


: the distribution area who was a dis- 
i tribution warehouse manager. We're 
: trying to hire people who connect 

: to the business.” 


How much interaction does your IT de- 
partment have with end users or other 
: departments in your company? “In 


: tions, forecasting, purchasing and : day-to-day maintenance, we interact 
; Management reporting. It’s very 


: integral to our business.” 


Brian Belcher, vice president of infor- 
mation systems at The Scotts Co., 
talks about how his department links 
to business at the consumer lawn- 
care products retailer. 


programmers. 


: How would you describe the pace of 

: the work? “It’s hectic to steady, and 
What are the most critical systems sup- : always challenging. Now that it’s 
ported or developed by your department : spring we seem to be busy all the 
on a daily basis? “A couple of years _: time. We try to do projects in the 
ago, we converted to SAP R/3, so we : off-season, so we're not going 
support all the core business appli- : through the learning curve when 
cations in North America, which in- : things are hectic.” 

cludes order entry, warehousing and : 
distribution, financials, plant opera- 


The Scotts Co. 


Who they are: The world’s leading supplier of 
products for do-it-yourself lawn and garden care. 
Main location: Marysville, Ohio = 
ea arta Sep meckoeceaes 
Interviewee: Brian Belcher, vice president of IS 


: How would you describe the overall 
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Tripwire is The Data Integrity Assurance Company 
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For a FREE 30-day 
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constantly with business users. And 
whenever we do strategic projects, 
the teams are not just made up of IS 
people; they’re also made up of 
business people. 

“So we’re working shoulder-to- 
shoulder with someone from, let’s 
say, human resources for payroll 
implementation. People from busi- 
ness and IS are almost always in the 
same room. It creates an accelerated 
development environment.” 


Does that get loud? “It can be. We give : 
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: them personal space, but they can in- : 
: teract easily with other people, from 
? managers to analysts and business 
: people and programmers.” 


: What do you like best about how career 

: advancement and training are handled 

: at your company? “We have a new 
initiative called performance man- 
agement, where specific competen- 
cies are tied to specific jobs. We 
also budget 40 hours a year to 

: associates in IS to achieve goals in 

their personal development plan. 


: You’re not pigeonholed into an IS 
: Career once you get here.” 


: What makes your company’s IT depart- 
: ment unique? “We're recognized as a 
: strategic partner in the organization. : 
: In order to go anywhere, you need IS : 
: to go with you. Another big perkis 
: location — we're right outside of 

: Columbus on a beautiful campus, 

: with trees, ponds, beautiful grass, a 
? swimming pool, volleyball, softball 


“It’s also not uncommon for IS 
people to move into the business. 


: and pavilions for cookouts.” 


What aspect of work do you look 

: forward to each day? “We're always 
i building something new, from the 
: smallest of projects to strategic 

: projects.” 


What aspect do you dread each day? 


: “The biggest one is meetings you 
: need to go to, so there’s not a lot of 
: ‘think’ time.” 


- Mary Brande! 
brandels@attbi.com 





Dear Career Adviser: 


For the past 10 years, I’ve been a network man- 
ager at a large nonprofit organization, and I’ve 
been contemplating leaving for the past year 
or so. The organization has offered me a small 


promotion and a title change to “associate di- 
rector of computer information systems.” In the 


for-profit world, which title has more weight: 


network manager, associate director of CIS, 
network director or director of networking? 


Dear Soon: 


The networking professional infra- 
structure isn’t driven by titles in the 
for-profit world, counsels Joe Sabrin, 
executive vice president and founder 
of eHire.com Inc., a New York-based 
technology recruiting firm. Instead, 
you'll need to stay current with the 
technologies that are key to your field, 
no matter what type of organization 
you're working for. These include 
Microsoft Corp.’s Active Directory, 
Microsoft XP deployment, Linux and 
Cisco Systems Inc.’s Architecture for 
Voice, Video and Integrated Data, as 
well as knowing how the Internet 
works as a business medium. 

Therefore, attend online and night 
courses to ensure that you don’t be- 
come obsolete in the event of a down- 
sizing, which is where nonprofits 
have shown themselves to be quite 
vulnerable in similar economic 
climates in the past. 

Making a move right now might be | 





| difficult anyway, as most companies 


| and often grant employees 


| at BeachHead Group in 





— LEAVING SOON | 


are waiting to hire new staff until cor- 

porate profits align with spending. 
Right now, says Sabrin, half the num- 

ber of people are doing twice the work, | 


| which, one would reason, can’t contin- 


ue indefinitely. 
Hiring will start again during the 


| summer of 2003, Sabrin forecasts, be- 


cause many of the improvements to IT 

infrastructure for Y2k will become 
obsolete next year with the three-year | 
amortization of equipment and the end | 


| of three-year leases. 


Dear Career Adviser: 


Like many others, my company is in a 


| tight financial situation and has delayed | 
| our yearly salary reviews for about six 
| months. It’s offering stock options to em- | 


| 
| 
- . | 
ployees as an alternate form of compen- | 
sation. The options are redeemable only 
for 12 months after they are offered, and 
then at only 25% per year for four years. 
Is this what companies are doing now 


and is it a “good deal,” or is 


| it just a way to keep key 


people from leaving? 
— LONG SHOT IN L.A. 


| Dear Long Shot: 


Companies typically use 


| a four-year stock option 


plan to attract employees 


additional options as in- 
centives, says Richard C. 
Leto, chief financial officer 


Millbrae, Calif. Generally, 
these options follow the 


| schedule you have described: 25% 


| vesting upon your first anniversary of 


employment, which is also known as 


| the “one-year cliff,” with the remainder | 
| typically vesting over the next three 
| years, either monthly or annually. 

| Senior executives might receive fully 


vested options upon hire to replace 
stock they are leaving behind. 


FRAN QUITTEL is an expert 
in high-tech careers and 
recruitment. Send 
questions to her at 
www.computerworld.com/ 
career_adviser. 


When you become vest- 
ed in stock options, they 
become yours to exercise 
or sell if you so choose. But 
you can also elect to keep 
them if you feel your com- 
pany’s worth is increasing. 
Generally, options termi- 
nate, or expire, when your 
full-time work status 
changes. In today’s envi- 
ronment, most companies 
grant additional options 
that also follow the origi- 
nal four-year vesting 
schedule to give employees 
another incentive to re- 
main with the companies, says Oak- 
land, Calif.-based compensation con- 

| sultant Rick Van Zee. Therefore, your 
company’s proposal is fairly typical. 

The problem, however, is this: Given 

| your company’s current shaky situa- 
tion, trading current cash compensa- 

| tion for additional options can make 

| your long shot even longer. D 





ONLINE AUCTION 


ASSETS OF HARVARDNET 
MULTI MILLION DOLLAR VALUATION!! 





(43) HVAC Units * (19) United Power PDU’s 
(13) UPS Systems * Metropolitan Copper Switch Gear 
(155) Turnstone Copper Cross Connect Chassis * (14) Larkin Dry Coolers 
EQUIPMENT IS LOCATED IN BOSTON, MA 


Bidding will take place online June I 
| viewable onsite from June 12-14, 9am-4pm at 256 


2002 - Equipment will be 
Street in East Boston 


haa a IM Oe soi 
www.cowanalexander.com 


For further information or to make an appointment for inspection, 


Sale conducted by 


CowanAlexander, ic 


call Lance Surovik:(512) 


27-9925 


For brochure call toll-free: 
888-875-SOLD 
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~~ ffyour back-e d database isn't a good match for your front- 
end development, you need a new database. Caché, the 

high-performance database from InterSystems, is a powerful 
fusion of today’s mainstream technologies: objects and SQL. 


Unlike Oracle and other relational databases, Caché takes 
advantage of its efficient multidimensional data engine to 
implement an advanced object model. It doesn’t try to hide a 
cumbersome relational engine beneath object-like wrappers. 


Every Caché object is compatible with Java, C++, ActiveX, 

and other rapid development technologies. And thanks to 
Caché’s “Unified Data Architecture,” every object class is 

instantly accessible as tables via ODBC and JDBC. 


With no mapping or middleware. That means no wasted 
development time. And no extra processing at run time. 
So not only will your applications be quick to build or 
adapt, they will run faster too. 


Time to Change Your 
Database. 


InterSystems » 


Ee CACHE 


Make Applications Faster 


Download Caché for free or request it on CD at www.interSystems.com/match1 





COMPUTERWORLD June 10, 2002 


UPS AND DOWNS 


Computerworld takes a look at how 
its Emerging Companies to Watch 
in 2002 are doing six months after 
they were named to the list. Learn 
which ones are thriving and which 
are struggling to survive. PAGE 42 


OPEN SOURCE IN 
THE ENTERPRISE MIX 


Linux may get all the press, but 

a wide range of open-source tools 
and products are now an integral 
part of many corporate IT projects. 


FUTURE WATCH 


Scientists are hoping to build a vir- 

tual human being, organ by organ. 

Its body parts would be distributed 

in labs around the country or even 

the world, but it would work — and 
could be studied — as a 
single being. 


QUICKSTUDY 


Steganography is 
the hiding of infor- 
mation within a 

more obvious 
kind of communi- 
cation. Digital stega- 
nography involves the 
hiding of data inside a 
sound or image file. 
Learn more about the 
technology in this 
week’s primer. PAGE 52 


SECURITY JOURNAL 


Security manager Mathias Thur- 
man assembles his penetration- 
testing tools and puts a proposed 
PeopleSoft application to the test. 
PAGE 54 
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The Fine Print 


EAD CAREFULLY: By coming within proximity of this license 
agreement, you or anyone who looks like you agrees to be 
bound, gagged and held accountable to the terms of this End- 
User License Agreement, while Megaloshaft Corp. will be 
held harmless under any and all circumstances. In addition, 


you agree to be bound by additional license terms that 
accompany any updates we apply to this software with- 
out your knowledge. 

1. Registration: Megaloshaft products won't function 
until the software is properly registered. 

2. Statement of Privacy: Any personal information we 
require is used strictly for statistical purposes. Mega- 
loshaft will under no circumstances show, sell, rent 
or otherwise make available to others any of the 
personal information we collect, such as your name, 
address, phone number, credit card numbers, e-mail 
address, tax returns or the VHS tapes we have of you 
cheating on your spouse with the neighbor down the 
street. In order to allay any fears about the amount 
and type of data we require during registration, 
Megaloshaft provides additional privacy insurance. 
Registered users can obtain our privacy insurance 
policy free of charge with every paid copy of our 
customer database. 

3. Redefinition of Terms: Megaloshaft reserves the 
right to redefine the terms of this agreement and 
will do so at the first opportunity. In fact, by the time 
you find out where we hid this document on our Web 
site, our per-CPU license policy will be in effect. By 
the time you get your first bill, our per-million-tran- 
sistor license policy will be in effect. See Provision 4 
for details. 

4. Repay Audit Provision: All users who are carbon- 
based — and that means all of you — automatically 
and unconditionally qualify for our per-million-tran- 
sistor license plan. Under this plan, you 
pay only $10 for every million transistors 
used by your company employees, their 
Aunt Tilly (see Provision 9) and any of 
their relatives, up to third cousins twice 
removed. You are required to audit your 
computing resources each year to calcu- 
late the average number of transistors in 
use per day. To give you an idea of how 
this is calculated, the AMD Athlon CPU 
contains about 37 million transistors. A 
digital watch contains a couple thousand 
transistors, depending on the brand. 

5. Audit Waiver Options: You may waive our 
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right to obligate you to perform an audit by purchas- 
ing a 50-year subscription fee for all the software 
you use, including Megaloshaft products. Upgrade 
options are available at extra cost. If you decline the 
waiver, you can ease the audit process by purchasing 
our specially designed transistor counting system, 
which scans everyone who enters or exits the build- 
ing for transistor-containing devices such as cellular 
phones, digital cameras or those greeting cards that 
play tunes when you open them. This system comes 
with a free, handy 12-gallon sealed trash compart- 
ment, which we prepack with our excess defective 
integrated circuits, and it even counts its own tran- 
sistors, the number of which varies depending on 
our available stock of defective parts. 

6. Trustworthy Crackproof Initiative: When it comes to 
a commitment to security, Megaloshaft is second to 
NONE. (NONE is a registered trademark of No Obvi- 
ous Network Experience Inc.) We assure you that 
Megaloshaft has taken every possible precaution to 
... DiS LiCeNZ BiN CRaCk3D BiE dA kInDyG4T3N 
bRiG4dE!! wE OWN y00 d00dZ! 

7. Kava: This product may support Kava. Kava is not 
ground, blended, percolated or otherwise processed 
for use in air traffic control systems, hospital devices, 
biological warfare weaponry, doomsday machines or 
answering machines. We will not be held responsible 
if your use of Kava fails to prevent a plane crash, an 
X-ray machine boiling your brain, a global epidemic 
of jock itch, a black hole that destroys the solar 
system or your mother-in-law visiting 
unannounced. Why Spin Macrosystems 
has contractually obligated us to make 
this frightening disclaimer is beyond our 
lawyers’ imaginations, but we’re tickled 
pink. 

8. Penalty: You will be liable for 100 times 
the price of this product if you violate this 
contract or any undocumented or future 
provisions in any way. 

9. Relative Terms: Not having an Aunt 
Tilly constitutes breach of contract. 

10. There is no Provision 10, subject to 
change. » 








wy 


TECHNOLOGY — 


EMERGING 

COMPANIES 

TOWAICH 
LOO2Z 


It’s a dog-eat-dog world for tech- 
nology start-ups. Computer- 


world’s up-and-comers for 2002 
have spent the past seven months either gobbling 
up new customers or getting eaten alive by rivals. 
Here’s a look at how some of our picks have fared 
since being named to the list in November. 


REASON FOR SUCCESS: its early- 
waming security system staves off intruders 
and slashes staffing costs. 


SOROS OER ROSE R EE HEE E EHS EEE EES 


LOCATION: Cupertino, Calif.; 
www.counterpane.com 


Pee eee SES OCCT C SS OSC CET Eee rer ese 


BUSINESS: Provides managed security 
monitoring services, 

CUSTOMERS & PARTNERS: Part- 
nered with DynTek Corp. to provide man- 
aged security services to state and local 
governments. Tearned with Infinitum 
Security Pte. Ltd. to expand into Asian 
markets. Joined Cisco Systems Inc.'s 
AVVID Partner Program. 


** 


In the world of IT security, 

showing a return on in- 

vestment can be an elusive 
proposition. But for The Regence 
Group Inc., a four-state Blue Cross 
Blue Shield insurance administrator in 
Portland, Ore., the payback from one 
initiative was real and fast. 

Since outsourcing its security event 
monitoring 18 months ago to Counter- 
pane Internet Security Inc., The Re- 
gence Group has reduced staffing 
costs in its monitoring operations cen- 
ter by 80%. The center watches over 
the company’s 200 perimeter devices, 
600 internal Windows NT servers and 
some of its mainframes, says David 
McLeod, assistant director of IT secu- 
rity at Regence. 

Outsourcing the security monitoring 
function has also completely eliminat- 


| ed intrusions thus far, he says. That’s 


pretty impressive, considering that 
Regence had 145,000 security events 











that required scrutiny in the last quar- 
ter of 2001 alone. 

“The FBI reported in January that 
1% of all attempted hacks are success- 


| ful, so there should have been some 
| breach of our systems. But there hasn’t 
| been,” McLeod says. 


In addition to being familiar enough 


| with the Regence network to detect 
| abnormal activity, Counterpane also 
| provides an early-warning system that 


has protected Regence from Nimda, 


Code Red and other destructive 


worms and viruses, McLeod says. 
Counterpane does this by correlat- 
ing events occurring at its client sites 
located in earlier time zones and alert- 
ing McLeod's IT team hours before 
such malicious programs hit the West 
Coast. For East Coast clients, early- 
detection information is passed along 
in real time from client sites in the 
Pacific Rim and other clients on the 


| East Coast. 


Founded in 1999 by well-known 
cryptographer Bruce Schneier, Coun- 
terpane has been a company on the 
rise, consistently scoring high marks 


from analysts for its services and chan- | 


nel marketing strategies. Counterpane 


| is now reselling through vendors such 


as VeriSign Inc. in Mountain View, 
Calif., and Check Point Software Tech- 


| nologies Ltd. in Redwood City, Calif. 


The company also earned praise for 


| reducing its pricing model from a 
| starting point of $10,000 per month for 
| small networks — too high for some 


customers — to $5,000 per month. 
But John Pescatore, an analyst at 


| Gartner Inc. in Stamford, Conn., says 
| he questions whether a single-service 


delivery model can sustain Counter- 


| pane’s dominance in the managed 

| security monitoring market. Gartner 
predicts that the managed security ser- 
| vices market, of which monitoring is a 


subset, will reach $5.27 billion by 2005S. 
“We think a mix of 70% managed 


| security revenues and 30% consulting 
| revenues is what’s needed to succeed,” 


Pescatore says. “We do give Counter- 
pane marks for its incident response 
consulting, but those services are 
already wrapped into their fees. So 
they’re shortchanging themselves by 


| not putting these people into consult- 
| ing delivery.” 


But according to a 2001 report from 
Giga Information Group Inc. in Cam- 
bridge, Mass., by staying focused on 
monitoring services alone, Counter- 
pane remains the only vendor-neutral 
company in its category. And Counter- 
pane’s channel customers can provide 
the consulting services when needed, 
adds Schneier. DB 





| 
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REASON FOR SUCCESS: Its manaye- 


ment software for ordering and sales chan- 
nels eliminates data entry errors. 


PHOT ERE O TEE HO SEER ESET E SESE SEED 


LOCATION: Redwood City, Calif.; 
www. Lcom 


CORR ORO HEHE FER EEE EE SHER E SEES 


BUSINESS: Provides e-commerce ca- 
pabilities for manufacturers to sell prod- 
ucts through all channels and partners. 


Seem O eee nee ese eeseneseeeeeesee 


CUSTOMERS & PARTNERS: Seagate 
Technology LLC, Castle Rock Industries, 
Nissan North America Inc. and Choice 
Hotels International Inc. chose Comer- 
gent’s Distributed E-Business System. 
Comergent signed a development and 
marketing agreement with Sun Micro- 
systems Inc. to expand joint marketing 


CORPO ETHER OHHH ESET HEH S ESE H ERE Eee 


LATEST ROLLOUTS: Added support 

for Simple Object Access Protocol and 
Web Services Description Language to 
its Comergent Network. 


With more than 15,000 

items for sale, Symbol 

Technologies Inc. discov- 
ered that its customers didn’t always 
know how to buy the right combina- 
tion of products. 

“Ordering errors would trickle into 
the factory and through our ERP [en- 
terprise resource planning] systems,” 
says Judy Murrah, vice president of 
sales development and systems at the 
Holtsville, N-Y.-based data terminal 
and bar-code scanner manufacturer. 
“We tried to fix it many times over the 
years, and nothing worked.” 

So Symbol hired KPMG Consulting 
Inc. in McLean, Va., to help find a solu- 
tion. In May 2001, Comergent Tech 
nologies Inc. was tapped for the seven- 
figure project, says Murrah. Its soft- 
ware was linked to a homegrown, Web- 
based catalog, an SAP ERP system and 
a sales portal from Haht Commerce 
Inc. in Raleigh, N.C. Murrah oversaw 
the six-month installation, which 
went live in March. 

“Comergent has their own connec- 
tors, so we just used what they sup- 
plied us,” she says. “We really didn’t 
have to build anything in the middle.” 

Symbol also didn’t have to add IT 
staff, Murrah says. Nontechnical per- 
sonnel maintain the rules that govern 
the software's use. 

She says Symbol hasn't calculated 

Continued on page 44 
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when it expects to achieve a return 
on investment for the project, but 
initial results indicate that the order 
error problem has been solved. 

Comergent’s software is Java-based 
and uses XML for data representa- 
tion, transformation and messaging. 
It works with Unix and Windows NT 
servers, as well as Java 2 Enterprise 
Edition and .Net applications. 

Louis Columbus, an analyst at AMR 
Research Inc. in Boston, says Comer- 
gent has taken much of the pain out 
of e-commerce implementations. 
“It’s probably the most enthusiastic 
customer base in the sell-side e-com- 
merce market these days,” he says. 

But these are tough times for 
e-commerce vendors, who face 
shrinking deal sizes and wary cus- 
tomers, Columbus adds. 

“[Comergent has] got the inside 
track to survivability because they 
do what they do so well,” he says. D 


> THE UPS 


Some Emerging Companies to Watch in 
2002 that have been in the spotiight in the 
past seven months. 


EnvoyWorldWide Inc. 

Bedford, Mass.; www.envoyworldwide.com 
BUSINESS: Offers customizable notification 
services to establish interactive voice and text 
communications. 

CUSTOMERS & PARTNERS: Electric Insur- 
ance Co. chose EnvoyWorldWide's Envoy- 
Xpress to automate its departmentwide com- 
munications. Alliant Energy Corp.'s utility sub- 
sidiaries implemented EnvoyProfiles notifica- 
tion service for customer communication. 
CCBN Inc., an investor relations firm, unveiled 
its Target Messaging and List Management ser- 
vices, powered by EnvoyWorldWide. Has part- 
nered with Altio Inc. and AnswerNet Network. 


Kada Systems Inc. 

Charlotte, N.C.; www.kadasystems.com 
BUSINESS: Helps develop database applica- 
tions on the desktop and deploy them to Palm 
OS devices or Pocket PCs. 

CUSTOMERS & PARTNERS: Texas Instru- 
ments Inc. added enhanced Java capabilities to 
one of its chip sets using the Kada Mobile Piat- 
form. Kada also created alliances with Espial 
Group Inc., Softwired Inc. and Metrowerks Inc. 
LATEST ROLLOUTS: Created frameworks for 
Java 2 Micro Edition applications (Kada Mobile 
Ready to Optimize Implementations). Designed 
a template for Java developers to design, de- 
velop and deploy Java 2 Micro Edition database 
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applications (Kada Reference Applications). 


Kalido Ltd. 

London; www.kalido.com 

BUSINESS: Provides information integration 
software to support management of mergers, 
acquisitions, reorganization and globalization. 
MONEY MATTERS: Announced 2001 revenue 
of $8.6 million, following its organization as a 
separate company within Royal Dutch/Shell 
Group of Cos. in February 2001. 

CUSTOMERS & PARTNERS: Cadbury 
Schweppes European Beverages picked Kali- 
do's Dynamic Information Warehouse to facili- 
tate the migration of Orangina to its own report- 
ing and business intelligence standards. 


PlaceWare Inc. 

Mountain View, Calif.; www.placeware.com 
BUSINESS: Provides Web conferencing ser- 
vices that enable businesses to conduct real- 
time interactive meetings and presentations 
over the Internet. 

MONEY MATTERS: Raised more than 

$30 million in funding. 

CUSTGMERS & PARTNERS: New customers 
include Tyco Electronics Corp., CUNA Mutual 
Group, Deloitte Consulting, Bank One Corp.. 
Webhire Inc. and Peregrine Systems Inc. Place- 
Ware created a technology and marketing al- 
liance with Microsoft Corp. 


Surebridge Inc. 

Lexington, Mass.; www.surebridge.com 
BUSINESS: Offers application outsourcing. 
CUSTOMERS & PARTNERS: Customer base 
reached 500 with addition of Andrx Corp., Ap- 





Links that are broken. 

Photographs that are mis- 

matched with the product 
text below them. Those are the pitfalls 
of an unwatched Web site. 

For the past two years, one large 
East Coast bank has steered clear of 
those hidden traps by using a testing 
suite from Empirix Inc. The tools en- 
sure that the links on the bank’s Web 
site are functioning properly and that 
its Web images are placed correctly. 

“I have not looked at all the tools out 
there, but this is an easy-to-use tool 
[that] I’m comfortable with,” says 
Steven Davis, vice president of quality 
assurance for the bank’s e-commerce 
site. “It’s easy to adapt it to most any 
Web site I’ve used.” 

Davis says the suite has allowed the 
bank to get its sites up and running 
quickly and reliably. 

Empirix was spun off in September 
2000 from Teradyne Inc., a Boston- 
based maker of testing equipment. It 


plied Graphics Technologies Inc., Bayard Adver- 
tising Agency Inc., Puma AG and Southeastern 
Library Network Inc. Named to PeopleSoft 
Inc.'s Accelerated Alliance Program of systems 
integrators. 


Visual Insights Inc. 

Naperville, lil.; www. visualinsights.com 
BUSINESS: Helps companies create e-busi- 
ness strategies with data visualization software 
to analyze and present e-business data. 
CUSTOMERS & PARTNERS: Teamed with 
Intel Corp. to deliver Web analytics capabilities. 
LATEST ROLLOUTS: Created Web analytics 
software with a browser-based interface that 
allows for the creation of performance indicator 
views tailored to individual users (eBizinsights 
XL 3.5). 


Widcomm Inc. 

San Diego; www.widcomm.com 

BUSINESS: Provides wireless communication 
system software and turnkey designs for all 
wireless communication devices. 
CUSTOMERS & PARTNERS: Licensed its 
Bluetooth communication software suite for 
Windows to Micro-Star International Co. 
Signed an agreement with Cypress Semicon- 
ductor Corp. to jointly develop next-generation 
Bluetooth solutions. Murata Manufacturing Co. 
signed agreement to incorporate Bluetooth for 
Windows communication software in its prod- 
uct line. Partnered with W-Link Systems Inc. to 
develop short-range wireless products. 

MADE HEADLINES: It was named the first 
member of National Semiconductor Corp.'s 
Bluetooth stack partner program. 





COMPUTERWORLD June 10, 2002 


boasts 3,000 customers running its 
Windows- and Unix-based products. 

The company has a two-pronged 
product line, offering tools that test 
and monitor Web applications and 
voice applications for call centers. 

Empirix’s products are well suited to 
monitor complex Web-based transac- 
tions, giving the company a foothold in 
the financial services sector and the 
airline industry. American Airlines Inc. 
in Fort Worth, Texas, ranks among its 
high-profile customers. 

Given that the testing market is fair- 
ly mature, Empirix has succeeded in 
carving out its own niche by combin- 
ing voice recognition with Web testing 
technology, says Theresa Lanowitz, an 
analyst at Gartner Inc., a Stamford 
Conn.-based consultancy. 

Empirix’s testing suite ties into San 
Jose-based NetIQ Corp.’s infrastruc- 
ture management software and is ex- 
pected to have an interface to Hewlett- 
Packard Co.’s OpenView management 
suite later this year. D 


© THEDOWNS 


Emerging Companies to Watch that have 
faltered in the past seven months. 


2Roam Inc. 

WHAT HAPPENED? November 2001, board 
of directors voted to shut down the company 
and sell off its assets. March 2002, acquired by 
Atlanta-based Air2Web Inc. 


Altra Energy Technologies Inc. 
WHAT HAPPENED? October 2001, sold off 
software portion of its business to New York- 
based Caminus Corp. March 2002, exited elec- 
tronic gas-trading business. 


Telenisus Corp. 

WHAT HAPPENED? December 2001, sold 
security management practice to VeriSign Inc. 
January 2002, sold assets and customer base 
of hosting business unit to Servervault Inc. in 
Dulles, Va. March 2002, sold security integra- 
tion and consulting services assets to Forsythe 
Solutions Group Inc. in Skokie, Ill. 


METHODOLOGY: Computerworld’s editorial 
research team reviewed the 100 firms named 
to the Emerging Companies to Watch 2002 list, 
focusing on publicly available company and 
industry news, press releases and financial 
reports from November 2001 to April 2002. 
The following information was evaiuated: 
growth (number of new or large clients, head 
count), financial performance, product news, 
partnerships with other IT suppliers, expansion 
and acquisitions. Information evaluated wasn't 
limited to that shown here. 





ty | 


Does your CRM system 


understand everything? 


(except what your customers are saying) 


Leverage your CRM Investment 


FORTUNE 1000° companies now add Autonomy's 
technology to their brand name CRM systems to 
automatically and intelligently process all their 
customer communications, including text and voice 
After all, customers don't talk to just a database, they 
mail and phone too. Find out how companies are 
adding Autonomy intelligence to Oracle, E.piphany, 
PeopleSoft, SAP Siebel and other leading CRM 
solutions to boost returns on their investment 


Autonomy makes sense of human friendly information 
such as email, phone calls, letters and reports; and by 
automating their handling, delivers real bottom-line 
benefit to the enterprise... In an unstructured world, 
intelligence counts 


Call us free on 1-877-MYAUTONOMY or visit our website 
www.autonomy.com to find out how to add power and 
value to your CRM application 


ww 


& 
~ 
~~ 

ew 


Autonomy **. 





Op 











~ TECHNOLOGY © 


of open-source 
tools have become 
key ingredients in 
corporate IT devel- 
opment projects. 


IKE GREAT CHARACTER ACTORS sharing 
screen time with a megastar, open-source 
tools seldom steal the limelight that shines 
on Linux. But those tools often get more ap- 
plause from users who are putting them in 
key roles inside corporate IT operations. 
Jeff Carter, CIO at Omaha Steaks Inter- 
national Inc., says he first became interest- 
ed in open-source software last year when the com- 
pany decided to bring its Web site in-house and link 
its online shopping cart application to the corporate 
database on an IBM AS/400. After a careful evalua- 
tion, the 1,800-employee, privately held gourmet 
foods company opted for MySQL, a popular open- 
source relational database from MySQL AB in Upp- 
sala, Sweden, for its shopping cart. 

The fact that the product was free was nice, says 
Carter. “But free that doesn’t work is of no value to 
me,” he says. What does make open-source technolo- 
gy valuable to Carter and others is the access to the 
source code and the broad-based online community 
of software developers continually debugging and 
adding features to a slew of tools that are used in a 
variety of IT projects. 

“I’m a huge advocate of open source because the 
developments to the product are unlimited because 
so many people are working on it,” Carter says. 


Access Is Everything 

Limits are what Jim Caley wanted to avoid. The 
senior systems engineer at Graco Children’s Prod- 
ucts Inc. in Elverson, Pa., recalls that the company 
needed to move a materials billing application from a 
client/server environment to an intranet. But the 
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en Source 


_ Awide range 


company, a division of Freeport, Ill.-based Newell 
Rubbermaid Inc., ran into roadblocks because the 
commercial products it had in-house didn’t do exact- 
ly what was necessary, and waiting for the vendors to 
customize them wasn’t practical. 

So Graco switched to a trio of open-source tech- 
nologies for its application. The company has built a 
Web application server using Java, Linux and the En- 
hydra Web application server, formerly from Santa 
Cruz, Calif.-based Lutris Technologies Inc. (see box 


below), says Caley. 


A PostgreSQL database runs on the server for Gra- 
co’s bill-of-materials project. He calls the open- 


| source approach “a safety net,” but “not necessarily 


because I have access to the source code personally, 
but because the community does.” Nonetheless, Ca- 


| ley has occasionally dipped down into the code. For 


example, he once had “to go into [PostgreSQL] code 


| and fix a bug in a [Java database connectivity] driver 
| to suit my purposes.” Because the bug was peculiar 

| to his environment, a fix for a commercial product 

| may have taken forever, but now, “we can have what 


we want” in a timely fashion, he says. 
Access to code is important, even if you’re not do- 


| ing the fixes yourself, argues Tig Kerkman, systems 


DRAWBACKS 


If there’s a downside to corporations using open- 
source technology today, it's the volatile nature 
of open-source vendors. 

Caley says that although the community support 
for open source mitigates the repercussions of 
open-source vendors going out of business, it still 
creates problems. For example, when Lutris Tech- 
nologies dropped commercial support of Enhydra, 
he says users were concerned about losing vendor 
sales and technical support contacts, which can be 
disruptive during project development. 

But despite numerous open-source companies 
abandoning commercialized products or going out 
of business, the open-source movement seems to 
be gaining momentum. 

~ Mark Hall 
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administrator for the city of Kenosha, Wis. The city 
uses the open source-based Evolution e-mail and cal- 
endaring application on 200 desktops. Being able to 
see Evolution’s code, which is built on the Gnome 
open-source graphical user interface (GUD and is 
sold by Boston-based Ximian Inc., has helped Kerk- 
man locate problems and give direction to Ximian on 
where they may be found. “Because I was able to 
muddle through the code, I could see where the 
problem might lie,” he says. As a result, 
able to turn around a bug-free version to the city in 
less than two weeks, Kerkman says. 

One of the more widely used open-source devel- 
opment tools is Tcl (pronounced “tickle”), a power- 
ful scripting language that is included in most Linux 
distributions and supports other operating systems, 
including Macintosh and Windows. Tcl, originally 
from Scriptics Inc., is a popular alternative to other 
open-source scripting languages such as Python and 
Perl and, especially, to costlier commercial alterna- 
tives such as Microsoft Corp.’s Visual Basic. 

“Tcl is my first tool of choice for most program- 
ming tasks,” says Tom Poindexter, principal consul- 
tant at Talus Technologies Inc., a software consultan- 
cy in Denver. “I'll supplement Tcl with C or C++ as 
needed.” He says Tcl excels in the corporate world 
for projects that involve GUI programming, XML de- 
velopment, network coding and test automation. 
Poindexter has also used Tel for applications that 
need access to results from SQL queries and to verify 
customer addresses against a postal database. 

Another advantage of Tcl, Poindexter says, is that 
“code of any given application tends to be 10% to 50% 
the size of an equivalent program written in C, C++ or 
Java. Writing less code means making fewer errors, 
getting the application done faster and [having] 
less code to maintain.” 


Big Risk? 

The track record for vendors build- 
ing a business with open-source prod- 
ucts has been spotty at best. Many ven- 
dors have failed or quit the open-source 
side of the business. Financial success 
isn’t the issue, users say. 

Poindexter acknowledges that now- 
defunct Scriptics was a significant con- 
tributor to Tcl’s development. “So, what 
happens to that tool you’re using when that 
vendor closes shop?” he says. “In the Scriptics 
case, Tcl was already free, so nothing was lost.” 
If it had been a commercial product, the tool 
may have disappeared with the company, 
Poindexter adds. 

Caley says this could have happened with 
PostgreSQL, which had been marketed com- 
mercially by Great Bridge LLC. Even though 
Great Bridge closed last year, he says, “That 
didn’t affect us at all.” In fact, Caley says, 
Graco has expanded its open-source ap- 
plication development with a critical 
product data management (PDM) 
system that uses the popular Post- 
greSQL and Enhydra programs. 

Familiarity isn’t the only thing 
prompting more companies to de- 
ploy more applications built with 


Ximian was 


| against Microsoft since the 1980s,” 
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open-source technology. Cost is almost always a big 
part of such decisions. 

Commercial vendor pricing boosts open-source 
advocates. “It’s the best opportunity to compete 
says Tom Adel- 
stein, chief technology officer at Bynari Inc. in Dal- 
las, which offers open-source messaging software. 

In fact, Kerkman says, if he had to use Microsoft 
products, it would have cost him $470 per desktop 
for equivalent features vs. $59 for Evolution. “We're 
saving the city tons of money,” he brags. 

Carter, who doesn’t hesitate to pay for software 
that meets his company’s needs, acknowledges that 
the “enormous prices” being charged by database 
vendors “make open source much more attractive.” 

Had Graco invested in a commercial PDM sys- 
tem, Caley says, it would have cost $100,000 to 


| $500,000, depending on the vendor and 
| the features included. Add to this train- 


ing, product customization and ongo- 

ing maintenance fees, and the cost 

can quickly get to seven figures. 
But by taking the open-source 

route, Caley eliminated those 

upfront licensing costs. 

Customizing the software 

required six months of 

Caley’s time, “and the 

application does 

exactly what 

we want it to 

do,” he 

says. D 
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Solutions anywhere in your network. That means you get gentle migration and flexible 
deployment from the core to the edge, or the other way around. Learn how a network 


assessment can help you discover how close you are to IP Telephony. Visit avaya.com/yes 
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Virtually Human 


Scientists want to create 
distributed software that 
re-creates the functions 
of the human body. 

By Jennifer DiSabatino 


caf 


study how functions in one part of the 
body impact others. Ultimately, the 
models could predict what a chemical, 
virus, bacterium or physical trauma 
would do at the cellular, organ, system 
and organism levels. Doctors in an 
emergency room could see the effects 
of physical trauma without opening up 
the body, and patients could have drugs 


customized to their body chemistry. 
ae In a setup similar to that of 


FUTURE 
WATCHO 


EAVE YOUR HEART in San Fran- 

cisco. And while you're at it, 

leave your ears in Boston, your 

liver in Tennessee and your 
lungs in Seattle. 

Charles DeLisi, who began the Hu- 
man Genome Project, is trying to get 
financial support for an even more 
awesome undertaking: re-creating in 
software all the physiological process- 
es of a human being. 

DeLisi, a professor and director of 
bioinformatics at Boston University, 
hopes to create a virtual human whose 
organs will be dispersed among re- 
search facilities across the country. 

This is no cyborg. It would be a dis- 
tributed computer program that uses al 
gorithms to re-create the functions of 
the human body, and in particular to 





the Human Genome Project, the 
Virtual Human Project would 
divvy up computational respon- 
sibilities. Specialists at each 
universiiy or laboratory would 
develop software that represents a par- 
ticular organ and then test what effect 
different stimuli have on that organ. 

Software for some organs and func- 
tions would be completed far in ad- 
vance of others. Development would 
be ongoing, and there wouldn’t be a 
completed virtual human, but rather 
an ever-evolving model. That, com- 
bined with the complexity of the pro- 
gramming, dictates that the virtual hu- 
man must be developed and run ona 
distributed basis, DeLisi says. 

Boston University has already creat- 
ed a virtual cochlea, the bones inside 
the ear that vibrate in response to 
sound waves and translate them into 
electrical impulses for the brain. And, 
DeLisi says, scientists and program- 
mers will make major progress in the 
next year on mapping how our sense 
of smell works and re-creating that in 
software. Vision is expected to follow 
over the next 10 years or so. 


Physical Limitations 

The virtual human would link the 
organ models over the Internet as they 
are created and eventually produce a 
holistic picture of the human organ- 
ism. “It’s been done in astronomy. It’s 
been done in molecular biology. It’s not 
been done in physiology,” DeLisi says. 

Researchers say biological informa- 
tion about humans has become too 
specialized, voluminous and dispersed 
to manage effectively without analyti- 


cal and interactive help from computers. 


“The human has got a wonderfully 
adaptable brain, but the input is slow, 
and we get distracted,” says Clay East 
erly, a researcher at Oak Ridge Nation- 
al Laboratory in Oak Ridge, Tenn., who 
is also promoting the virtual human. “I 








| don’t see any way for a human being, 


or a group of human beings, to synthe- 
size this vast data.” 
While the project has drawn some in- 


terest from the government, academia 


and industry, no one seems inclined so 


| far to fund major parts of it. For the 


time being, the virtual human is likely 
to grow from relatively small efforts, 


| such as the virtual cochlea project. 


Money won't solve all the problems 
anyway. Computer models are still rel- 
atively crude, and they’re narrowly de- 


| fined to a particular reaction — ina 
| cell or in an organ, for example. 


The many-to-many structure of the 
Internet and the use of XML would be 


| the framework for sharing information 


that now exists in isolation, DeLisi says. 


| But creating programs that accept input 


from other applications is a challenge. 
The virtual human would require 


| integrating processes and software 
| across vastly different scales, from 
| molecules to whole organisms. “I don’t 


think we have the foggiest notion of 
how to go about it,” Easterly says. Pro- 
gramming would have to be done at 


| each level — the molecular, cellular, 

| organ and systemic — simultaneously 
| and progress up and down until the 

| functions met. Biological research 


vould influence, and be influenced by, 


| the programming effort. 


The entire process could take 100 
years or more, especially since it must 


| ultimately include the brain. “That, I 


think, is a ways off,” DeLisi says. D 





| TECHNICAL IMPEDIMENTS 


| For a look at some obstacles to building the virtual 


human, visit our Web site: 
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Learn how a network assessment can 
help you discover how close you are 
to IP Telephony. Visit avaya.com/yes 
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Omaha Steaks’ online sales have soared 150% over the last 3 years. And with 20% of their sales conducted over 
the Web, they required a highly available server. Since deployment, their IBM @server iSeries has been rock 
solid (2 years, no unplanned downtime). For a consultation with an iSeries specialist, call 1 800 426-7777 and 


mention priority code 102AGO006, or visit ibm.com/eserver/omaha : . 
— (© business is the Game. Play to niin 


Requires Parallel Sysplex" environment. All custom ed numbers and results reported are from customer sources. Results obtained in other customer environments will vary. IBM, the e-business loge 
e-business is the game. Play to win, iSeries, pSer Se nd Parallel Sysplex are ve 2d traciemarks of International Business Machines Corporat: Li rec rademark of 
Linus Torvaids. inte! a registered trademark of inte! Corp s subsidiaries in the Unite tes the intries. UNIX is a registered trademark of The Open Group. Other compar iu ct and service 
names may be trademarks or service marks of others. © 2002 IBM Corporation. Ail nghts reserved. 
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DEFINITIONS 
Steganography is the hiding of 
information within a more ob- 
vious kind of communication. 
Although not widely used, dig- 
ital steganography involves the 


hiding of data inside a sound 
or image file. Steganalysis is the 
process of detecting stegano- 
graphy by looking at variances 
between bit patterns and un- 
usually large file sizes. 


BY DEBORAH RADCLIFF 
N ENGINEERING 
firm suspected 
that an insider 
was transmitting 
valuable intellec- 
tual property out of its net- 
work. When Seattle-based 
forensics consulting firm Elec- 
tronic Evidence Discovery 
Inc. (EED) investigated the 
case in June 2000, it couldn't 
find the evidence on the local 
hard drive. After checking 
mail logs, however, 
investigators found 
the smoking gun: two 
e-mails with harmless- 
looking image attach- 
ments sent by an engi- 
neer. Turns out, the images 
were hiding two of the compa- 
ny’s most precious engineer- 
ing specifications. 

The technique used to hide 
the specifications inside im- 
age files is a high-tech version 
of a process called steganogra- 
phy, which has been around 
since the beginning of record- 
ed history, says Sayan Chakra- 
borty, vice president of engi- 
neering at Sigaba Corp. in San 
Mateo, Calif. 
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| a USA Today article about 


During the Roman Empire, 
he explains, secret informa- 
tion was tattooed on a mes- 
senger’s shaved head. When 
the hair grew back, the mes- 
senger was sent out with the 
secret message on his scalp 
and a decoy message in hand. 

In the IT realm, steganogra- 
phy replaces unneeded bits in 
image and sound files with se- 
cret data. Instead of protecting 
data the way encryption does, 
steganography hides the very 
existence of the data. 
And it’s undetectable 
under traditional traffic- 
pattern analysis. 

There are few legiti- 
mate uses for steganog- 
raphy, say forensics profes- 
sionals. And despite reports 
circulating about terrorists 
using steganography to com- 
municate secretly, experts 
doubt that’s the case. | 

“Most people study stegano- 
graphy either as an academic 
discipline or a curiosity, but I 
don’t know if even terrorist 
groups would actually use it,” 
says Chakraborty. 

Last year, after reading 


DY 





ata 


steganography and terrorism, 
Neils Provos, a Ph.D. student 
in computer science at the 
University of Michigan in Ann 
Arbor, decided to do his dis- 
sertation on steganography. 

Provos developed detection 
and cracking tools to analyze 
images for signs of steganog- 
raphy, such as overly large 
files and uneven bit mapping. 
He tested the tools and then 
used them to compare 2 mil- 
lion images on San Jose-based 
eBay Inc.’s Web site, which has 
been cited as a possible place 
for posting and retrieving hid- 
den messages. Provos found 
no cases of steganography. 

“Steganography becomes 
the focus of attention, dies 
down, and then the public is 
all over it again,” says Provos. 
“But it will never be pervasive, 
because the amount of data 
you can actually hide in the 
images is fairly small. And if 
someone wanted to steal intel- 
lectual property, it’d be easier 
to copy the data on a disk and 
carry it out in your pocket.” 

Even if steganography is 
present, forensics experts pre- 
fer to start by investigating 


| less complex areas. But in 


some cases, the only evidence 
might be hidden in image or 
sound files, so investigators 
need to be aware of steganog- 
raphy and the tools used to 
detect and crack it, say experts. 

“It’s true that steganography 
is very little used, but we need 
to be aware of it when doing 
almost any forensics analysis,” 
advises Kenneth Shear, vice 
president of technology and 
law at EED.D 


STILLCURIOUS? = its 


To learn more about the ways stegano- 

graphy might be used, visit our Web site: 
QuickLink: 30130 
www.computerworld.com 


Are there technologies or issues you'd like 
to learn about in QuickStudy? Send your 
ideas to quickstudy@computerworld.com 
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How It Works 


Steganography strips less important information from digital content 
and injects hidden data in its place. This is done over the spectrum of 
the entire image. Here's one way it could be implemented: 

The following sequence of 24 bits represents a single pixel in an im- 
age. Its 3 bytes of color information provide a total of 256 different val- 
ues for each color (red, green and blue) and thus can represent a total 
of 16.7 million colors. This particular value displays as a dark green: 

Byte 1 - Red Byte 2 - Green Byte 3 - Blue 

ORBORBOGRERO  OGRENENENORNEN 0 0 OSBEREDENO 


Now, let's take 11 of these pixels that represent, say, part of a 
solid-color background. In the following sequence, the least signifi- 
cant (rightmost) bit of each 8-bit byte has been co-opted to hide a 
text message ~ the four characters Aha! - in ASCII binary: 


0 ORONO Om 0800 0ffo0 
O ORMEIEREN OME 0 0 Of OROR 


Here are the bits behind those 11 pixels: 
Byte 1 - Red 

0 RB 0 BR 0 KIEE o 

0 Mf 0 El o KEE 0 i 

OD 0B 0 BIKE 


Byte 2 - Green 


0 EEREDED 0 


\ oak By 48 OF 


O:0'0:'0 o: 
‘OBR OREO RMENEE Of 
(om OM ORIEN 0 


The hidden message occupies 32 of those 264 bits (about 12%) 
and contains four 8-bit bytes. in the diagram, each maroon or gold box 
represents a bit that had to be changed to include the hidden message. 
Notice that only 14 of 264 bits (less than 59) had to be changed and 
only seven of the 11 pixels were altered. 

The two figures below represent the 11 colored pixels we've been 
manipulating. The figure on the left is the original, unaltered version. 
The one on the right has been modified, as shown above. Can you 
see a difference? | can’t either. 


Unaitered Altered 


If instead of 11 pixels we had a 300KB JPEG file, we could accom- 
modate a text message of 36KB, or about 6,000 words. 
- Russell Kay 





When everyone focuses on customers, something amazing ippens: departments 


communicate, questions get answered, and products k moving. That’s why the mySAP” 
Customer Relationship Management solution links customers with your complete 
organization. It keeps data consistent across all touch points, and it’s the only CRM solution 
that integrates with all other business processes, so it shortens sales cycles and lowers costs 
Which means your customers won't be waiting around for good service; they'll be too busy 


getting it. For more info, call 800 880 1727 or visit www.sap.com 
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Enterprise Application 
Goes Through 





A security audit calms Mathias’ fears about a 
new Web-enabled PeopleSoft implementation 





BY MATHIAS THURMAN 
URING THE PAST few months, 
my firm has been in the 
process of implementing 
PeopleSoft for managing 
corporate payroll, benefits 
and other human resources functions. 
As part of the project, management 
asked the information security depart- 
ment to conduct a comprehensive au- 
dit and penetration test against the 
infrastructure. 

That makes sense, since the data that 
some of the systems will con- —— 1 
tain is sensitive in nature. 
We're implementing the ver- 
sion of Pleasanton, Calif.-based 
PeopleSoft Inc.’s application 
that includes a Web-based 
front end that talks to several 
other systems. The problem 
with a Web-based front end, however, is 
that it gives anyone with a Web browser 
potential access to the application. 

The systems are configured in a 
three-tiered architecture consisting of 
front-end Web servers, midtier applica- 
tion servers and back-end databases 
that house our critical data. This in- 
cludes employee compensation infor- 
mation, health care data and personal 
information such as employee Social 
Security numbers, dates of birth and 
dependent information. 

I've never before audited or conduct- 
ed penetration testing of a PeopleSoft 
deployment. To me, however, the pur- 
pose of the application is irrelevant. 
The process, methodology and mind- 
set are still the same. The main ques- 
tions that needed to be answered in- 
cluded the following: 

m= Can someone on the public Inter- 
net gain unauthorized access to the 
PeopleSoft infrastructure? 

m Can someone with legitimate ac- 
cess exceed their authorization and 
gain access to information he shouldn't 
be able to view? 

m@ Can someone on our internal net- 
work without any level of authorization 
gain access to the infrastructure? 

The problem with audits of an imple- 








SECURITY 
MANAGER'S 
JOURNAL & 


mentation like PeopleSoft is that you 
can’t just audit and conduct penetra- 
tion testing against the application 
itself. The application consists of net- 
work resources, servers, software, peo- 
ple and the interaction of all the pieces 
to deliver the application in an efficient 
and secure manner. 

The order in which the audit and 
penetration test is conducted is impor- 
tant. Understanding the entire process, 
interaction and flow, in my opinion, is 
the primary and most important step. 
You can’t rely on the network 
guys to determine correct 
firewall port configurations. 
They’re just going to do 
what the application archi- 
tects ask of them. Nor can 
you tell the systems adminis- 
trators how to lock down the 
systems properly without first knowing 
how the entire process works. 


Operation Overview 

We first met with the application 
folks and had them walk us through the 
entire system’s operation. We covered 
everything from authentication to how 
the Web servers, application servers 
and database servers communicate 
with one another. We asked what ports 
were necessary between each of the 
resources for proper operation. And we 
asked about the trust relationships be- 
tween the servers. 

Once we understood this, it was that 


: : | 
much easier to audit the access control | 


lists on the firewalls and routers. Un- 
derstanding what services needed to 
run on the system made it easier to 


was no easy task, because there wasn’t 
one person in each discipline who 
knew everything. This information- 
gathering was the most time-consum- 
ing part of the audit. It took over a week 
to get a full understanding of the envi- 
ronment and trust relationships. 
Auditing the network devices and 
individual systems was fairly straight- 
forward. A variety of open-source and 





Wringer 


commercial vulnerability assessment 
tools proved useful in validating the 
integrity of the systems for open ports, 
vulnerable services and general operat- 
ing system configuration errors. How- 
ever, testing the actual application itself 
was another story. 

Several applications are intertwined 
with custom-made scripts and applica- 
tion programming interfaces, which let 
the application perform seamlessly and 
interoperate with other third-party soft- 
ware, such as databases, middleware 
and Lightweight Directory Access Pro- 
tocol files. The common security scan- 
ning tools that we used for assessing the 
systems and network devices weren't 
able to dive deep within an application 
to uncover programming and configu- 
ration errors in the application. 


| Favorable Results 


For this, we turned to Santa Clara, 
Calif.-based Sanctum Inc.’s AppScan. 
This tool is quite different from your 
typical scanning tools in that instead 
of providing an IP address or a net- 
work segment, the starting point is a 
Web page. The tool has a variety of op- 
erating modes, ranging from fully auto- 
mated to interactive. I chose to go with 
the interactive mode because it lets me 
mouse-click my way through the appli- 
cation as if I were a legitimate user. At 
any time, I can stop and let AppScan 
execute its automatic scan. Under the 
covers, AppScan appeared to enumer- 
ate every Web page and script it could 
find and then performed a multitude of 


exploits to try to take advantage of pro- | 


gramming and configuration errors in 
the Web-based applications. 

AppScan was quite thorough. It enu- 
merated more than 2,000 Web pages 


and discovered several configuration | 
| errors that might have allowed a mali- 
audit the operating system configura- | 
tions. Gathering all this information | 


cious user to alter Web pages. 
The results of our audit were ex- 


| tremely favorable. Other than a few 


misconfigured Apache Web servers 
and some firewall ports unnecessarily 
left open, the PeopleSoft architecture 
seemed fairly secure. 

Next comes my least favorite part of 
testing: writing up the final report. I'll 
probably spend the next few days com- 
piling the results of the penetration 
testing and architecture review. 
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The Open Scanning Option 
Commercial programs such as App- 
Scan aren't the only game in town. Here 
are two useful open-source (read: free) 
software tools for security projects: 

The Open Web Application Security 
Project (OWASP) builds open-source 
application security tools, including the 
Web Scarab vulnerability scanner. The 
organization also just released a useful 
document titled “OWASP Guide to 
Building Secure Web Applications and 
Web Services,” which should be helpful 
to those developing Web applications. 
You'll find both at www.owasp.org. 

From Houston-based BindView De- 
velopment Corp.'s Razor security Web 
site comes Vlad, a security scanner that 
checks for the common vulnerabilities 
defined in the SANS/FBI Top 20 security 
threats list from the SANS Institute in 
Bethesda, Md. Download the tool at 
http;//razor.bindview.com/tools/viad/ 
index.shtml. 


AppShields on Full 

Version 4 of Sanctum’s AppShield Web 
application firewall, released in April, 
has an intuitive user interface that 
makes it suitable for rapid enterprise 
deployments, according to a recent 
Information Security Magazine review. 
But users who need serious developer 
hooks may want to look elsewhere. For 
details, visit www.infosecuritymag.com/ 
2002/may/bulletproot.shtml. 


10 More Reasons to Worry 

The SANS Institute recently added 10 
items to its SANS/FBI list of top security 
vulnerabilities. Visit the SANS Web site 
at www.sans.org/top20.htm. 


Security Site of the Week 

Dozens of security sites are on the 
Web, but not all are useful or well orga- 
nized. The Church of the Swimming Ele- 
phant has an odd name, but it’s cleanly 
designed and organized, advertising- 
free and up to date with the latest news. 
Check it out at www.cotse.com. 


Have you had experience auditing 
a major enterprise application? If so, I 
welcome your suggestions in the Secu- 
rity Manager’s Journal forum. D 
This week's journal is written by a real security 
manager, “Mathias Thurman,” whose name and 
employer have been disguised for obvious reasons 
Contact him at mathias_thurman@yahoo.com, or join 
the discussion in our forum. 


| QuickLink: a1590 


| To find a complete archive of our Security Man- 


ager’s Journals, go to our Web site: 
@Q www.computerworld.com/sjm 





Build a scalable data warehouse = 
with a single point of control? 


And simplify the way you create @ 
and customize enterprise reports? 


SAS’ is all you need to know. 


surface information from any source —corporate 
systems, e-business channels, your supply chain 
and beyond-—across any platform. And deliver a 
shared version of the truth throughout your 
enterprise. To find out how top companies reap 
bottom-line rewards with SAS software, cail toll free 
1 866 270 5727 or visit www.sas.com/warehouse 


The Power to Know. | Sa. 


SAS and ail other SAS institute Inc. product or service names are registered trademarks or trademarks of SAS Institute inc. in the USA and other countries. ® indicates USA registration. © 2002 SAS Institute inc. Aili rights reserved 50046US.0502 
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Sr. Systems Analyst wanted by 
NJ based Co for job loc through- 
out the US. Must have Bachelor's 
degree in Comp. Sc. or Engg., 2 
yrs. of s/ware exp. & proficiency 
with Linux, Telecom & network 
security pro Ss, Firewalls 
VPN, SMS. Respond to: Atina’ 
Inc., 100 Franklin Sq. Dr 

#304, Somerset, NJ 08873 


GG 8244). No phone calls 


Programmer wanted by Financial 
Software & Systs Dvipr 

Dvip & maintain testing pro 
dures; doc on-line ref materials 
provide in-house customer sup 
port; write functional specs for 
programming; dvip new systs 
BS in Comp Sci & 2yrs exp in job 
offered req. Respond to: Office 
Mngr/SunGard, 2 Adams PI, 4th 


Fi, Quincy, MA 02169. 


Programmer-Analysv/DBA to 
design, analyze, develor 

test, optimize, implem 
provide user support for v: 
applications using VBScr 
JSP, Java and HTML. Desig 


databaselinks. 

dexes, and PL/SQL 
procedures and package: 

with Windows NT, Unix 
Discoverer & MS Acces: 

Reqd: B.S.C.S. & 5 yrs Exp 

40 hrs/wk. Freq. re! within the 
US may be necessary. Resume 
to J. Brigham, HR #061002 
6992 Columbia Gateway 
Columbia, MD 21046 


Systems Analyst wanted by 
based Co for job loc thr 

the US. Must have Master's 
degree in Comp. Sc 

yrs of s/ware exp 

with Bluetooth, UPnP 

JAVA & Visual Basic 


>: Atinav, Inc., 100 Frank 


08873. (Ref 


phone calls 


wanted by Software D 
in Bklyn te 

s/ware 

reqa 

Systems 


Brooklyr 


Pim. 


x 
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Systems Administrator wanted 
by Home Care agency in Eik 
Grove Village, IL. Reqd: Bachelors 

Computer Science or Elec- 
tronics or Communications 
Engineering. Send resumes 
to: HR, Caring Home Care 
Services, inc., 1881 Commerce 
Drive, Unit 107, Elk Grove 
Village, iL 60007. No calis 


please 


PROGRAMMER/ANALYSTS 
wanted by hardware/software 
c nm Houston. Must have 
degree & exp. Respond by 
resume only to: Mr. S. Ryu, J/H 
#10, Computize, Inc., 1008 Wirt 
Rd., Ste #150, Houston, TX 
77055. 


Program'rs/Analysts: Analyze. 
plan, devip & test sw applic'ns 
for cable communica'n industry 
Evaluate user request to program 
& modify applica'n w/VC++ 
K1.2, Corba, AnsiC++ on 
PowerTV/NT Platform. 40h/w 
BS or foreign equival't & 

1-yr wk exp in any position 
nvolv'g JDKi.2 & PowerTV. 
Resume to J. Bhasin, Itaas, Inc. 
S. Berkeley Lk Rd. #A 

ross, GA 30071/email 


jaspal.bhasin @ itaas.com 


Softwa gineer wanted w/BS 
2 yrs. exp. in San Jose, CA 
ame to: HR Dept., Scicom 

s, Inc., 1500 S. Dairy 

TX 


Jter related 
available for large trans: 
tation and logistics services 
| company. Degree, technical skills 
| & experience vary per positions. 


vianirizarry 


O. Box 833, Mahwah 
Attn: Vivian Irizarry 
ef. #1.Emp 


sponsor visas for 


(yj) careers.com 


A high-tech company is seeking 
the fllwing Software Engineers 
who will collaborate in the 
research, design & development 
of next-generation storage net 
work systems. Req'd 

Software Engineer #1: Master's 
in CompSci. Min tyr exp as 
Software Engineer/Researcher 
Must have research and/or project 
exp w/Active Networks & network 
programming. REF#20065-1 
Software Engineer #2: Master's 
in CompSci. Min tyr exp as 
Software Engineer/Researcher 
Must have research and/or 
project exp w/design & develop 
ment of IP protocol stacks. 
REF #20065-2 Software Engin 

#3: Master's in CompSci. Min 1 
yr exp as Software Engineer 
Researcher. Must have research 
and/or project ex network 
security & access control in |S 
REF#20065-3 

Send res. to: Anne Budowsky 
Nextorage, inc., 520 8th Ave 
21st Fi., NY, NY 10018. PLS 
INDICATE REF# 


SOFTWARE CONSULTANT 
Analyze & evaluate exist 
proposed software systems. 
Dsgn, dvip, impimnt and improve 
programs, systems and related 
procedures to process data usi 
in-depth knowledge of the soft 
ware dvipmnt life cycle. Encode 
test, debug and install operating 
programs and other system 
software utilizing knowiedge of 
RDBMS environments and 
PowerBuilder. B.S. degree or 
equiv. in Comp. Sci., Comp. Sys. 
Math, Engnrng, Bus. or Com 
merce + 2 yrs of exp. in positior 
offered or as a Prog. Analyst 
Sys. Analyst or Soft. Engnr reqd. 
Exp. must incl: a) Oracle, Sybase 
or SQL Server; and b) Power 
Builder. High mobility preferred. 
40 hrs/wk, 8 am oT 
as reqd, $61,000/yr. Qualified 
applicants please submit resume 
to Manager, Washington County 
Team PA CareerLink, Millcraft 
Center, Suite L, 90 West 
Chestnut Street, Washington, PA 
15301-4517. Refer to Job Order 
No. WEB249035. 


Business & Information Systems 
Administrator. Administe: 
manage company information 
structure. Perform S related 
functions. Suppori aintain 
and enhance current JD Edwards 
ERP system to achieve business 
strategies and objectives. Create. 
maintain, and distribute business 
reports from ERP system. Desigr 
and maintain company 
software. Oversee and pe: 

ail IT related functions. Posit 


degree req d ( 
experienc 

Comp. Sci 

f ex 

proof of legal 

the United States. Si 
Joe Kardos, 15 

Jackson Hwy 76 West 

NC, 28439. T 


iS paid for by t 


Authorware 


w/pioneer 


nedia Authorware 
proj., convert & add changes f 
existing proj. to highest versic 
of s'ware. P 


gm. extensior 


nc!. missing funct 
sual C/C++ Developer St 
on Windows interface to prg 
critical functionality unavailable 
in Authorware, compile/draft 
maint. s'ware doc. Must demon- 
strate working knowledge w/Au 
thorware dev. environ. & pgrmmg 
Principals only reply to Dept. DP. 
ISI Inc., 411 Hackensack Ave. 
Cont. Piz li, Hackensack, NJ 
07601 


Advantecs has openings for 
application developers for mair 
frame and Database administra- 
tors for Oracie/DB2 for its var 
jocations in US. Must have at 
east 5 years experience in the 
following areas 


Mainframe Application Developers: 
Exp in online/batch p mming 


gramming client server 

tions with mainframe as se 

big plus. 

Oracie / DB2 DBAs: Exp in set 


3 up and supporting prod 


tion in Oracie/DB2 environment 


All the positions requ’ 
analysis, problem so 
mmunication skills 
positions also require Bach 
Jegree. Others require Master's 
Jegree, equivalent degree 
experience s 
Excellent pay 
Please indicate 
applied for. Mai 
ept, Advantecs 
1430 Oak Tree Roac 
selin, NJ 08830 


Computer Professionals (Multiple 
ositions) w/exp in 
Cobol, DB2, CICS, IMS, MVS 
CL, ERWin, Delphi, NFS, NIS 
DHCP. HACMP. Raid Arrays 
Pro*C, C, C++, VC++, HTML 
Perl, Veritas Volume Manager 
Bourne, K Sheil, Java, Java 
Script, ASP, Corba, EJB, JSP. 
Swing, AWT, Weblogic, Wet 
sphere, Serviets, COM/DCOM 
Net Ac 
Runner, Peopiesc 
feritas, Sun Cluster 
Backup, HP Open View 
backup,Linux, Unix, HP-UX, Aix 
DOS, Windows NT, VAX/ VMS 
VB, PB, Sybase, PL/SQL, T- 
SQL, ODBC, JDBC, MS SQ 
Server, SQL*Plus, SQL*Loader 
Oracie, Datawarenouse, Forms 
Rep Orac ) Oracle 
RDBMS, Dynix/Ptx, Oracle Apps 
GL, AP. AR, OE, BOM, PO, HR 
INV)Oracile Financial Applic 
Oracle Designer 
Excel, Cisco Ri 
NT, DOS, Sun Solaris Cluste’ 
equent Server, Aries Servers. 
Sun Solaris system & Network 
Admn., SUN, SUP Servers, ACL 
TCB, Developer 2000, D 
) Rational Rose 
bounds Checker, True 
se time, OOAD, MF 
EI-CMM, ERWin and related 
sols. Apply to: STG, Inc., 3340 
Peachtree Road, Suite #1800 
Atlanta GA 30326.E-ma 


tresumes @ stgil.com 


Applications Developer (Norcross 

3A)- Resea design/analyze. 

develop sc write ins 

ising C/VB/JavaS 
unner/PL/SQL/Apache: 


tions using MSGP Dexterity. Assist 
t mgrs in systm dsgn, inc 
aneral Ledger, Receivables & 
Recruit staff & 
wkly meetings. Manage te 
of dev. BS in 
related field 
ified MSGP Dexterity Eng 
er or proven exp w/Dexterity 
lary based on exp. Resume to 
ERG, 3430 American River Dr. 
Ste 200, Sacramento, CA 95864 
or email ckaeser@enterprise 
resource.com Attn. Janet Kaesar. 





@ careers.com 


Mercury Interactive Corporation 
is the world’s leading provider of 
solutions that automate testing 
quality assurance and applica 
tion performance management 
for e-business, enterprise resource 
planning, and client/server ap 
plications 


We currently have exciting 
pportunities available in our 
Sunnyvale, CA headquarters. 
as well as various locations 
throughout the US, for the 
following positions (all ievels/all 


types) 


¢ Software Engineers 
¢ Systems Analysts/Engineer 
(Consultants 
* Network Engineers/Unix Ad 
istrators 
atabase Administrators 
‘echnical Support Engineers 


Please send resume to Merc 

interactive Corporation with cover 
letter to Human Resource Dept. 
fax: 408-822-5514 or email your 
resume to jobs @merc-int.com 


additional informat 


ion on 

2 and other positions, visit 
yur web site at www.mercury 
nteractive.com. Mercury Inter 
act Corporation is an equal 
employment opportunity employer 
committed to the development of 
a diverse workforce 


Senior Software Engineer 
Utilizing Tibco, MSMQ, JMS 
Jevelop message-driven dis 
ed system for commodity 
develops 
various user interfaces including 
Java Swing. HTML, C# and 
VB/VB.NET technologies and 
mplement 3rd -party software 
packages for energy trading risk 
nanagement system. Requires 
master degree in computer science 
r related area; 2 years exp. witt 
trading risk management 
system including knowledge in 
financial/physical trading, commor 
financial instruments and related 
commodities; 2 years € with 
distr 2d system architecture 
server architecture 

applying Tibco ActiveEnterprise 
RMI, EBJ, MSMQ and Web 
application development applying 
HTML, and ASP/ASP.NET; 3 
years programming experience 
using Java, C/C++, VB, Oracle 
MSSOQL and XML. Send resume 
to: Maximi Consulting, Inc. 7019 


Lawler Ridge, Houston, TX 


Liu 


icant sought for position in 
sville, North Carolina as 
Senior Project Manager in Digital 
Technology and consulting ser 
to perform the role of 

architect for a B2B 
echnology solutions 
that uses the Sun Java as the 
core development program. This 
cludes designing the N-Tier 
ture and the solutior 

‘ he client 
ty to understand 
and client 
a functiona 
ransiate them into a 
Includes 

jersta 

vements in techinolog 
t-paced world and to incorpo 
hance the 
g ion to maintain the 
petitive advantage. Manage 
according to client 
Leads a team in imple 


ng WEB development busi 


3 the changes to er 


Edu ) nN Engineering 

C science plus 5 
years experience in related 
fields. Exc ent verbal, written 
presentation, training technical 
and customer relationship skills 
are required. Strong interper 
sonal and communication skills 


are essentia 


Forward res 

Genevieve Dornel 
Human Resources 
intiqua International In 
45 Broadway, 19th Floor 
New York, NY 10006 


Senior Programmer Analyst 
Student information database 
programming, analysis of user 


needs based on Datatel Colleague | 


information system. Analyze. 
develop web pages using Cold 
Fusion and other prograrnming 
tools. Develop needed databa: 
Required knowledge and expe- 
rience: Unidata query statements 
to select data from Datatel 
Colleague Release 17 SIS Data 
base. Download info resulting 
from queries. Work with diverse 
clientele to design, implement 
web interfaces for delivery 
and/or collection of information. 
Develop Cold Fusion apps using 
SQL to access and maintain 
data. Write Java and Java Script 
to support Cold Fusion apps with 
client side logic. Develop and 
maintain MS Access databases 
MS Visual Basic and SAS pro. 
gramming. Base Salary $32,802 
per 12 months plus fringe benefits. 
Send two copies of letter of 
application and resume to: South 
Dakota One-Stop Career Center. 
Attn: Laura Hoyt, 1310 Main Ave 
S, Suite 103, Brookings, SD 
57006. Telephone: (605) 688- 
4350. Fax: (605) 688-6761 Must 
refer to Job Order Number 
$D1199271 


Richmond, Virginia law firm 
has an opening for a Senior Web 
Developer 
The successful candidate will 
build software applications to 
provide the technical architecture 
of Web sites or Web-based soft 
ware products. Responsibilities 
inciude gathering feedback from 
design and technical staff on 
development needs; building 
user interface applications and 
back-end databases; authoring 
omplex Web pages; assisting in 
project planning and Web 
design; creating prototypes and 
functional specifications for 
software projects; and creating 
technical methodologies for 
engineering solutions to Web 
development problems. Addition 
ally, the Senior Web Developer 
will meet regularly with other 
information technology personnel 
on specifics of projects and 
deadlines; and will offer guidance 
on new Web technologies to utilize. 
such as browsers, languages 
and plug-in 


Requirements for this position 
include a Bachelors Degree in 
information Systems, Computer 
Science or Mechanical Engi 
neering (or foreign equivalent) 
and 5 years of progressively 
responsible experience using 
VBScript, JScript, HTML, ASP, 
JAVA, SQL and other program 
ming and scripting languages 
the ability onceptualize and 
plan long-term needs of Web 
Development and to manage 
related projects. The ideal candi 
Jate will have excellent oral and 
written communication ski 

leadership and project manage 
ment experience, and the know! 
edge le to make suggestions 
regarding Web-based technical 
standards for specific Web sites 


and the Firm as a whole 


Interested candidates should 
ubmit a resume to: McGuire 
ods LLP HR Recruiting 
ames Center 

Richmond 


Venturi seeks D/B App. Dev. for 
Sea/Bell area projects. DESC 
Arch., dsgn, & dev. bus. intell 
sys. & rel. apps & interfaces util 
RDBMS, SQL, VB, extrac 

transform & load tools, reporting 
tools, Unix & Win o/s. Dev. data 
models & d/b schemas. Mng 
Jata migration & integratior 
Travel to client sites. REQ: BS ir 
Engr., CS, Math, or Phys. + 3 yrs. 
full life cycle dsgn, dev, & impl 
of c/s sys, apps, interfaces, & 
RDBMS util. SQL, HLL, & Win 
o/s. 1 yr. performing data migration 
& sys. integration. Prem. sal 

benes.& bns. Pls. rep: J. King 
Job#CCL-89, 112 Kirkland 
Way, Kirkland, WA 98033 


GM Naa 


OH Consulting, Tech. Services 
Firm seeks Programmer Analyst 
to code, test, debug simple and 
complex maintenance programs 
and subroutines; design, develop 
large size complexity program 
modules; design system require 
ments, analyze business proce 
dures and issues, convert them 
to programmable form and design 
verify, test and support such 
requirements, procedures, issues 
and programs;design. develop 
web-based reports to summarize 
and analyze Performance 
Management metrics gathered 
from GSM wireless networks: 
maintain user database for the 
Web-base applications. Bachelor's 
Degree in Computer Science & 
min. 1 yr. exp. in job or job related 
Must have exp. with Peri, Java 
HTML, Shell Script, and UNIX 
Exp. may be gained before, during 
or after degree. Resumes 
to Liberty Communication 
Services, Inc. 540 Officenter 
Place, Ste. 200 Gahanna, OH 
43230. No calls. EOE 


CIGNIFY, a leading information 
technology company in time & 
attendance systems currently 
seeks applicants for the following 
position in its Atlanta, GA offices 
Engineering Manager. Applicants 
for this position must have a 
bachelor's in computer science. 
engineering, or related field plus 
five years of experience in 
developing client/server and/or 
Web-based technologies and 
three years of experience in 
database design, implernentation 
(PL/SQL or T-SQL) and tuning. 
Applicants should also have one 
year of experience in VB6.0. 
XML, and BizTalk/SOAP and two 
years of project management 
experience directing lower-level 
engineers. For consideration. 
please forward your resume and 
letter of interest by mail to 
CIGNIFY Corporation, Vice 
President, Engineering, 7000 
Central Parkway, Atlanta, GA 
30328. Please do not email 
resumes. EOE 


Bioinformatics Scientist to provide 
technical assist on enterprise 
bioinformatics software to research 
scientists at client sites in the 
U.S. & overseas. Determine & 
analyze user requirements & 
code customized soiutions & 
automate the analysis function 
of software for biologists & bioin. 
formaticians, using base scripts. 
Perl & Java. Assist in the design 
& development of software to 
meet the needs of the bioscience 
research community. Reqd. Ph.D 
in biolog molecular biology & 
2 yrs. exp in bio-science research 
using bio-technology. M-F, 40, 
hrs/wk. Send resume to |. Sytnikov 
HR, Ref #061002, InofrMax, Inc 
7600 Wisconsin Avenue, 11th 
Floor, Bethesda, MD 20814 


SOFTWARE CONSULTANT 


Analyze & evaluate e: 

proposed software sys' 
Dsgn, dvip, impimnt and improve 
programs, systems and related 
Procedures to process data using 
in-depth knowledge of the soft 
ware dvipmnt life cycle. Encode. 
test, debug and install operating 
programs and other system 
software utilizing IBM operating 
systems, CICS/COBOL ian 
guages and DB2. BS degree or 
equiv. in Comp. Sci., Math, Bus 
Engnrng or Commerce + 2 yrs of 
exp. in position offered or as a 
Prog. Analyst, Soft. Engnr or Sys 
Analyst reqd. Exp. must include 
a) Operating System: IBM; and 
b) Languages: CICS and COBOL 
c) Database: DB2. High mobility 
preferred. 40 hrs/wk, 8 am —5 pm. 
OT as reqd, $61,000/yr. Qualified 
applicants please submit resume 
to JS Supervisor, Greene County 
Team PA CareerLink, 4 West 
High Street, Waynesburg, PA 
15379-1324. Reter to Job Order 
No. WEB249039 


SYSTEMS PROJECT DIREC- 
TOR, BAAN 

Responsible for BaaN ERP (en- 
terprise wide) software projects 
Plan, design, & direct BaaN pro- 
jects, customizing/implementing, 
linking to web-based custom order 
processing, inventory manage: 
ment, distribution services, virtual 
& actual warehousing. Oversee 
customizing BaaN Finance, Admin 
& Distribution modules. Provide 
project management (develop 
budget, time schedule, evaluate 
projects), training, supervise 
consultants & contractors. Re- 
quires MS in CS or MIS & 3 yrs 
exp BaaN systems proj. dvipmnt, 
or BS CS or MIS & 5 yrs exp 
large database design, dvipmnt 
& implementation including 3 yrs 
BaaN systems project dvipmnt 
exp to include 2 yrs project 
mngmnt or leader for enterprise: 
wide BaaN implementation. Also 
requires demonstrated ability to 
use BaaN Finance, Admin, & 
Distribution modules, to imple 
ment BaaN on Windows NT & 
MS SQL Server, & to link BaaN 
w/ standard EDI translators 
knowledge of BaaN Advanced 
Tools. 40 hrs/wk, 87-110K/yr 
Send 2 resumes to: Case 
#20018393, Labor Exchange 
Office, 19 Staniford Street, 1st 
Floor, Boston, MA 02114 


COMPUTERIIT 

Project Eng'r, Networks. Fram 
ingham, MA. Install & maintain 
routers & switches. Configure 
routing protocols such as TCP, 
IP, IPX, AppleTalk, SNA, SDLC. 
HDLC, OSPF, RIP, RIP2, EIGRP 
& BGP. Implement LAN's & 
WAN's. Implement security in 
ntwrks. using Firewalls & VPN 
ntwrk. devices & complete req'd 
documentation such as ntwrk 
diagrams, Layer 2 & Layer 3 
ntwrk documentation & installa 
tion rpt documentation. Provide 
tech. support & troubleshoot 
REQUIRES: M.S. in Comp. Sci 

Elect Eng’r, or related field with 
graduate coursework in Comp. 
Ntwrks. 40 hrs/wk plus overtime 
as needed. Mail resumes w/ ad 
(no calls): D. Schofield, DiData 
135 Newbury St., Framingham 
MA 01701 


Axiom Systems, Inc., an enter 
prise technology company cur 
rently seeks applicants for 
the following positions in its 
Alpharetta, GA location: Senior 
Programmer Analyst - analyze 
requirements, desic develop 
and test product lifecycle man 
agement and workflow customiza 
tions of web-based applications 
PDM Integration Analyst - design 
develop and test seamless inte 
gration of PDM and CAD systems. 
PDM Programmer Analyst - an 
alyze requirements, design, de- 
velop and test prodcut lifecycle 
management and worfkiow 
scenarios; Programmer Analyst 

analyze requirements, design 
develop and test Internet-based 
software systems and applica 
tions. Applicants for these positions 
must have a bachelor's or master's 
degree in Computer Science. 
Engineering or related field plus 

5 years of relevant experience 
For consideration, please forward 
your resume along with lette 
specifying position applying for 
to: Axiom Systems, Inc., Attention 
Chuck St is, 2550 Northwinds 
Parkway, Suite 440, Alpharetta 
GA 300 EOE 


Sr. Software Design Engr. wanted 
by a software/hardware dvip. C 

in San Jose, CA. Mail resume to 
HR, SANiight, Inc. at 50 W. San 
Fernando § Ste 420, San 


Jose, CA 95113. 


Noetix seeks Corp. Web Admin 
for HO office in Bellevue, WA 
DESC: Analyze, admin, & maint 
pert. & content of corp. internet & 
intranet sites. Install & config 
web servers, netwks, site & sys. 
security s/w. Dsgn & dev. web & 
multimedia apps. that access 
info. stored on var. RDBMS util 
SQL, ASP. XML, VBScript, JScript 
& Macromedia Flash on Win o/s. 
REQ: BS in Engr, CS, Phys, or 
Math + 2 yrs. exp. admin. & maint 
perf. & content of corp. internet & 
intranet sites; install & contig 
web servers, netwks, site & sys. 
security apps; dsgn & dev web 
sites & web apps. to access info. 
on RDBMS util. SQL, ASP, VB- 
Script, JScript, & Win. Plus 1 yr 
exp. dsgn. & dev multimedia 
apps. util. Macromedia Flash 
Prem. sal. + benes. Pls. reply to 
J. Hubbs, Job #NC-105, 2229- 
112th Ave NE, Ste. 200, Bellevue. 
WA 98004 


SALES MANAGER 

Pelco, Closed-circuit TV Manu 
facturer, located in Clovis, CA is 
hiring 

Strategic Accounts Manager 
(Sales Manager) 

Job requires travel throughout 
the U.S. 

REQ: Bachelor's degree or equiv. 
in Bus. Admin., Marketing or 
related field (in lieu of Bachelor's, 
will accept 3 yrs exper in job. 
mkting, or rel.) +5 yrs exper in 
CCTV & video equip industry. 
incl. 3 yrs marketing exper w. 
customer strategies. Resumes 
to: Pelco, HR, Attn: Kathy Tucker 
3500 Pelco Way, Clovis, CA 
93612 or email to HR @peico.com 
Affirmative Action/EOE 


Software Developers, Gaithers- 
burg, MD. Analyze, design 
develop, integrate, test, implement 
& maintain business applications 
in internet architecture using 
Lotus Domino, DB2, DECS 
XML, Java, Javascript, DHTML 

AS400, and MQSeries. Train 
Clients in the use & operation of 
new applications. B.S. in C.S 

Math or related & 5 yrs rel. exp. 
including 3 yrs exp. with DB2 
or RDBMS. Experience with Lotus 
Notes/Domino, Java, and Cus 
tomer Relationship Management 
Sales Information System. 40 
hrs/wk. Resume to B. Smith 
HR #18, Softelcomm, inc. 849-C 
Quince Orchard Bivd, Gaithers- 
burg, MD 20878 


Software Engineer/Developer 
needed to assist in building 
an SAP EH&S R/3 system 
Requires Masters Degree in 
Engineering or related field and 
2 years experience in software 
development which may precede 
Masters Degree. Resumes tc 

Human Resources, Enterprism 
Solutions, 1 Little Falls Centre 
Ste 110 Centerville Rd 

Wilmington, DE 19808. Refer 


to job code: BDBC 


Systems Analyst wanted by FI 
based Co. Must have Master's 
Jegree in Comp. S¢ 

2 yrs. of e in Comp. S/W 
Jev. and/or cons. Must have 
proficiency in RDBMS, VB, VS. 
Weblogic, XML. Respond to 
GSNP Corporation Vb/a 
Howard Johnson, 3314 S. Dale 
Mabry Hwy., Tampa, FL 336; 


(Ret. GG 8205). No phone calls 


Computerworld * InfoWorld *» Network World + June 10, 2002 


Project Mgmt Analyst (Brunswick, 
New Jersey): Manage, coordinate 
& analyze activities re info. Tech 
& internet-based projects. De- 
termine project costs, require- 
ments, etc. Requires: 2 yrs. exp. 
in job offered or 2 years exp. 
as a mgmt execut. or a related 
position with same duties and 
“Bachelors in Business Admin 
or a related field. “Will accept 
bachelor's in a combination of 
college level education and 
experience. Exp. ref. required 
Salary: $68,000/yr. EOE. Send 
resume to: Vertex Soft, Inc., 622 
Georges Road, Ste. 104 N 
Brunswick, NJ 08902 


Baan Tools Specialist 


You will be responsible for 
requirements analysis & Baan 
ERP implementation to support 
sales, marketing & manufacturing 
Ideal candidate will have Bache: 
lor's degree in C.S. or related 
field with at least three years 
experience in Baan ERP systems 
implementation in UNIX & NT 
environment. Send resume to 
HR Manager, Stonhard, Inc 

P.O. Box 308, Maple Shade, NJ 
08052, FAX: (856) 321.7525 
www.stonhard.com EOE 

M/F/H/V. No phone inquiries 


Programmer-Analyst for specialty 
wire and cable manufacturer in 
Fort Mill, South Carolina. Minimum 
two years experience developing 
designing, coding, analyzing and 
implementing commercial system 
applications using JAVA, XML 
and DHTML, performing debug- 
ging and unit testing on applica 
tions to eliminate errors and 
ensuring quality operations 
Requires Bachelor of Science 
degree in Computer Science. 
Send resume to Recruiter-PA 
Belden Wire & Cable Company, 
793 Fort Mill Highway, Fort Mill 
SC 29715 
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careers.co 


NV Health Care seeks System 
Analyst to analyze and develop 
business information technology 
Projects; maintain applications; 
develop extended & system stored 
procedures; configure server 
develop reports; upgrades 
system. Min. req: Bachelor's 
Degree in Electronics Eng or equiv. 
based on a credentiais evaluation, 
and 2 yrs. exp. in job or job-related, 
which includes Programming, 
healthcare, laboratory operations, 
Visual Basic, Unidata, SQL and 


Pick programming. Travel required. 
Resumes to H.R. Dept, 4230 
Burnham Ave., Las Vegas, NV 
89119. No calls. EOE 

Programmer Resources Interna- 
tional Inc is seeking experi- 
enced Programmer/Analysts 
with Sytems Architecture back- 
ground including DB2 Stored 
Procedures, NDM, SOL, etc 
Applicants please forward 
detailed resume to : 15620 
Manchester Rd Suite 210-22, 


Ellisville MO 63011 Attn: HR 


Talent is 


the fuel of 
the new 
economy. 


Fill up 
with 
ITcareers. 


IT careers and 
IT careers.com 
can put your 
message in front 
of 2/3 of all US 
IT professionals. 
If you want to 
make hires, 
make your way 
into our pages. 


Call Janis 
Crowley at 


1-800-762-2977 


ITCAREERS 
whare ths best 
get better 
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Database Administrator to design, 
develop and administer oracle 
8/8i/9i databases in sun solaris, 
sun cluster, linux and windows 
2000 environments. Experience 
in PL/SQL, Pro*C. Korn scripting 
and apache web server. Require: 
BS Degree in Computer Science/ 
Engineering/Science, or a closely 
related field with four years of 
progressively responsible experi- 
ence in the Job offered or relat- 
ed occupation of Programmer/ 
Analyst. Extensive travel on 
assignments to various client 
sites within the US is required. 
Competitive salary offered 
Apply by resume to : Ravi 
Kandimalla, President, EVEREST 
COMPUTERS INC., 900 Old 
Roswell Lakes Parkway, Suite 
300, Roswell, GA-30076: Attn 
JobJA 


Software Engineer to design, 
development, test and maintain 
embedded systems, products 
and GUI! development for de- 
buggers of various zilog proces- 
sors. Strong object oriented 
software development with C++, 
VC++, RTOS, Debug Monitors, 
XML, MFC and Stingray. Require: 
BS Degree in Computer Science/ 
Engineering/Science, or a closely 
related field with more than one 
years of progressively responsible 
experience in the Job offered or 
related occupation of Programmer. 
Extensive travel on assignments 
to various client sites within the 
US is required. Competitive 
salary offered. Apply by resume 
to : Ravi Kandimalia, President, 
EVEREST COMPUTERS INC., 
900 Old Roswell Lakes Parkway, 
Suite 300, Roswell, GA-30076: 
Attn: JobSR 


SOFTWARE ENGINEER to 
design, develop, test, implement 
and maintain network manage- 
ment application software using 
Object Oriented Design/Pro- 
gramming, C/C++, Java, Net 
Expert, Rational Rose, UML, 
CORBA, Oracle RDBMS, TCP/ 
IP, TMN, SNMP, TL1, ATM and 
ADSL under UNIX operating 
system; Mentor junior engineers 
Require: B.S. degree in Computer 
Science, an Engineering disci- 
pline, or a closely related field 
with four years of experience in 
the job offered or as a Systems 
Engineer or Programmer/Ana- 
lyst. Extensive travel on assign- 
ment to various client sites within 
the U.S. is required. Competitive 
salary offered. Apply by resume 
to: Kenneth T. Miles, MS! Con- 
sulting, 6151 Powers Ferry 
Road, Suite 540, Atlanta, GA 
30339; Attn: Job SH 


Software Consultant 

Design/code/implement SAP 
applications using ABAP pro- 
gramming; implement sortware 
lifecycle with respect to SAP: 
develop real time interfaces from 
SAP to EAI and MOQ series; 
design/code SAP script; develop 
elec. data interchange (EDI) 
scenarios for vendor payments, 
bus. apps. prog. interfaces 
(BAPIS); extraction programs: 
dev. programs for DELTA and 
refresh loads of R/3 data; design 
search helps/data_ inquiry 
dictionary objects, modify SAP 
printing programs. Req. Master's 
in Comp. Sci., Eng., or equiv. 
and 2 yrs. exp. in job offered or 2 
yrs. as Software Developer. 
Resume to HR, GDKN, 300 S 
Pine Isiand Rd., Ste. 3033 
Plantation, FL 33324 


IT CAREERS 


Multiple openings for permanent 
Programmer Analys/Quality As- 
surance/Test Engineer/Data- 
base Administrator/System or 
Network Engineer/Business An- 
alyst/Software Engineer posi- 
tions from entry to senior level 
throughout the US. Will design 
develop, program and test busi 
ness applications, enterprise 
systems, networks and computer 
systems involving TPF, sales 
force automation, data ware- 
housing, business metrics, E- 
commerce, Internet/Web appli. 
cations and others using object 
oriented design and development 
relational database modeling 
distributed systems and current 
Web technologies. Particular 
tools include one or more of 
JAVA, C/C++, Visual Basic, ASP. 
ActiveX, UNIX, PL/SQL, SAP, 
Windows NT, Lotus Notes, Per! 
COBOL, IMS, CICS, DB2, TPF, 
Assembler, CORBA, HP/UX 
COM/DCOM, OLE, CGI, internet 
technologies such as HTML 
JDK 1.2, Java Web Server 2.0, 
EJB in Sun Solaris, Windows NT 
95/98 and others. B.S. in Com 
puter Science, Engineering 
Math or related area. Will accept 
combination of education, training 
and experience in lieu of degree. 
Prior experience and M.S. re- 
quired for some positions. Com- 
petitive salary/401(k)/benefits 
offered. Most active locations 
include: Atianta, GA, Bloomington, 
MN, Chicago, IL, San Francisco, 
San Jose, CA, Baltimore/ 
Columbia, Maryland, Durham. 
NC, Ft. Lauderdale, FL, Miami, 
FL, Minneapolis, MN, Fairfax 
Herndon and Richmond, VA, St 
Louis, MO and Winston-Salem, 
NC. Send resume to: intelliMark, 
701 Emerson Road, Suite 445, 
St. Louis, Missouri 63141, Attn: 
Betsy Smith. 


SAP Systems Analyst needed 
for Consulting and Information 
Company in Aipharetta, GA. Job 
duties include: Utilizing business 
and technical expertise in systems 
application and products in data 
processing (SAP); analyzing 
user requirements, procedures 
and problem to automate pro- 
cessing, or to improve existing 
computer SAP systems;and 
planning, designing and imple- 
menting an integrated family of 
sales, marketing, and customer 
service applications. Applicant 
must have Masters in Business 
Administration, Computer Science 
or Engineering, plu 3 yrs. of exp 
in SAP FI/CO modules and at 
least 2 yrs exp in oil and gas 
modules. 8:00 am to 5:00 pm 
Monday-Friday. $102,000 per 
year. Send 2 resume and cover 
letter to Heather Arnold, B2B 
Workforce, Inc. 11625 Rainwater 
Drive, Suite 340, Alpharetta, GA 
30004 


Sftwr Services Eng’r (multiple 
positions). Belmont, CA. Devel- 
op, create and modify web- 
based applic. sfwr using Java. 
XML, SQL, PERL, & JSP. Resp. 
for troubleshooting, product con 
fig., customization tasks, data 
mapping, plan object def'n, and 
UI Elements. Design & develop 
corresponding white box & black 
box testing scripts & methodolo- 
gies. REQUIRES: M.S. (or for 

eign equiv) in Comp. Sci, Mech 
Eng'r, Chem., or related field 
plus 1 yr exp in job offered or 1 
yr exp as a Sftwr Eng’r, Sftwr 
Consit, or Activations eng’r Exp 

which may have been obtained 
concurrently, must include 1 yr 
exp utilizing Java and 1 yr exp uti 
lizing XML. Mail resumes (no 
calls) to Coralee Traficante, 
Apteagrity, Inc., 155 Passaic Ave. 

1st Fl., Fairfield, NJ 07004 


ts em eee a 


IT) careers.com 


Sr. Director — PeopleSoft Solu- 
tions. Job location: Chicago, IL 
Duties: Resp. for the delivery of 
technology-related services 
based on PeopleSoft products. 
Resp. for recruiting, develop. & 
staffing of employees w/in the 
service line. Develop & execute 
annual strategic plans, quarterly 
tactical plans, achieve revenue 
& margin targets & mentor 
directors, mgrs. & sr. consultants. 
Define & develop product & 
service offerings for clients. Con- 
duct qual. assurance reviews of 
architectural designs, proposals 
& contracts as well as the delivery 
of tech. services. Act as sr. tech. 
resource on strategic engage- 
ments, developing & managing 
tech. PeopleSoft work plans 
utilizing knowl. of PeopleSoft 
Internet Architecture (PIA) & 
infrastructure requirements. Lead 
tech. team members inci. Tech. 
Architects, Database & Tech. Ad 
ministrators, Appi. Developers, 
Appl. Integrators & Tech. Spe- 
cialists. Also act as Tech. Archi- 
tect using People Tools to provide 
complex solution designs & con- 
duct qual. assurance reviews 
of other arch. designs. Mentor 
directors, mgrs. & sr. consultants. 
Requires: B.S. (or foreign equiv.) 
in Comp. Sci., Eng., Bus. Adm. or 
related field & 8 yrs. exp. in the 
job offered or 8 yrs. exp. as 
a Mgr., Consultant, Systems 
Analyst or Prog./Analyst. Con- 
current exp. must incl. 5 yrs. exp. 
developing tech. work plans 
using PeopleSoft appis. & 5 yrs 
exp. w/PeopleSoft architecture & 
infrastructure requirements. 
EOE. 40 hrs./wk.; 8:00 a.m. to 
5:00 p.m. Send resume (no calls) 
to: Diane Tuccito, AnswerThink 
inc., 817 W. Peachtree St., Ste 
800, Atlanta, GA 30308. Must 
have legal auth. to work in U.S. 


Systems Analyst to analyze. 
design user requirements, de- 
velop computerized applications 
for the automation of views to 
large databases in telecom ap- 
plications. Technically sound with 
hands on experience in design, 
building Client-Server Applica- 
tions, n-Tier Applications and 
Distributed Applications Using 
RDBMS, OOPs , App server, 
TCPIP, MAPI and POPS, Main 
frames, Shell Scripting & System 
Programming. Bachelors degree 
in Information Systems, Engi- 
neering or Computer Science 
and 2 years Experience. Send 
resume to Pyramid Consulting 
Inc., Attn: HR 5335 Triangle 
Parkway, Suite 510, Norcross, 
GA 30092. 


Programmer/Analyst to design, 
develop, test, implement, and 
support in client/server environ 
ment, using, C, C++, VC++ 
ORACLE, SQL, and EDI on 
Windows NT and UNIX Platforms. 
Require:BS Degree in Computer 
Science/Engineering/Science, or 
a closely related field with 3 
years of progressively responsible 
experience in the Job offered or 
related occupation of Programmer. 
Extensive travel on assignments 
to various client sites within the 
US is required. Competitive 
salary offered. Apply by resume 
to : Ravi Kandimalia, President, 
EVEREST COMPUTERS INC. 

900 Old Roswell Lakes Parkway, 
Suite 300, Roswell, GA-30076 
Attn: JobKR 


Software Developers 

Boca Raton co. seeks several 
software developers to devel- 
op/design under direct supervision 
of Sr. Developers proprietary 
capture and workflow mgmt 
software, document image 
processing functions, image 
compression/decompression al- 
gorithms, internet enabling of 
doc. imaging using C/C++, Java, 
Bscan scripting language and 
other image proc. tools/scanner 
drivers. Req. a BS in Comp. Sci. 
and 1 or more yrs. exp. in job offered 
or 1 or more yrs. exp. as Software 
Eng. Resume to HR, Purchase 
and Delivery Admin. Services 
543 NW 77th St., Ste. 200 Boca 
Raton, FL 33487. No calls 
please. 
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COMPUTERIT 

Computer Systems Eng. Job 
Location: Roswell, GA, Duties: 

Design, dev. & maintain comp. 
software applications, such as 
DHTML, JAVA, and C++. Install 
and setup Computerized Process 
Control Management Systems 
and configure customized hard- 
ware & software. Plan, design, 
and setup a computerized pro- 
duction process utiliz. AutoCAD 
2000 software. Manage teams 
for configuring collaborative soft- 
ware using Woldvision & J.D. Ed- 
wards. Plan, design & implement 
e-commerce for manuf. environ- 
ments by implementing giobal- 
ization and Communic. among 
different commercial co.'s world- 
wide. Research & dev. Internet 
market for Process Control 
Management or Wizard Systems 
svcs. Requires: Bachelor's degree 
in Computer Science. Employer 
will accept any combination of 
education & empl. exp. equiv. to 
a Bachelor's degree in Computer 
Science. EOE. 40 hrs/wk. Send 
resume (no calls) to Sam Manafi 
President, Wizard Systems Inc. 

2403 Macy Drive, Roswell, GA 
30076. 


PROGRAMMER/ANALYST to 
analyze, design, develop, debug, 
test, implement and maintain 
web-based application software 
in a client/server environment 
using object oriented program- 
ming, Visual Basic, Visual Studio 
intervev, ASP, ADO, HTML, VB- 
Script and JavaScript under 
Windows and DOS operating 
systems; Bridge Unisys main- 
frame with Windows operating 
system for inter-processing 
communications using middle- 
ware software including Unisys 
ActiveLINC and PowerClient 
Require: Bachelor's degree in 
Computer Science/Engineering 
Information Systems, or a close- 
ly related field with two years of 
experience in the job offered 
Extensive travel on assignments 
to various client sites within the 
U.S. is required. Competitive 
salary offered. Send resume to 
William A. Openshaw, Opensnaw 
Media Group, inc., 3296 Cahaba 
Heights Road, Birmingham, AL 
35243; Attn: Job JS. 


Systems Manager: For security 
products manufacturing co, resp 
for application systems dev, 
impiementation & support, inci 
maintenance of existing Enterprise 
Resource Planning System, Sales 
& Production Systems applica 
tions developed on MS Access & 
Visual FoxPro; & re-engineering 
of applications, inci data modeling, 
development of new aigorithms. 
programming, testing & imple- 
mentation using relational clata- 
bases & modern software ‘ools 
incl Intemet-based access. Req’s: 
Bachelor's degree, or equiv, in 
Computer Sci, Eng or related 
field. 5 yrs exp in job offered or 5 
yrs application software exp. 
Exp must inc! data modeling, ap 
plication design, development & 
support. Prof in MS Access. 
FoxPro/Visual FoxPro, SQL, 
SQL Server, Visual Basic, & one 
modeling tool such as Erwin 
PowerDesigner or Rational Rose. 
Familiarity with one internet 
technology such as Java. 40 hrs/ 
wk. Send resume to D. Johnson, 
515 N. Fraley St., Kane, PA 
16735, 


PROGRAMMER ANALYSTS re- 
quired for our Warren, NJ office. 
Design, develop and maintain 
software applications using 
DB2, IMS DB/DC/ADF, Teradata, 
Datacom, DB/DC, PL/1, Assem- 
bier, Natural ADABAS and aiso 
quality assurance. Bachelors 
Degree required in Computers, 
Math or any other related field of 
study + 2 years experience in the 
job described above. 40 hrs/wk. 
Please send resume to HR 
Manager, Computer Manpower 
USA, Inc. 15 Olid Forge Drive, 
Warren, NJ 07059. 


careers 


Programmer Analyst (multiple 
openings): Analyzes user re- 
quirements, procedures, and 
problems to automate or improve 
existing systems and review 
computer system capabilities. 
workflow, and scheduling limita 

tions. May analyze or recommend 
commercially available software. 
Analyzes science, engineering, 
business, and other data pro. 
cessing problems for application 
to electronic data processing 
systems using relational data- 
base management systems 
(RDBMS) and related software. 
Must have one year of experi- 
ence using one of the following 
Informix, Oracle, FoxPro, Sybase. 
SQL Server or Progress. Must 
also have one year of experience 
in job offered or as a computer 
professional. Work involves 
extensive travel and frequent 
relocation. Bachelor's degree or 
foreign equivalent (3 or 4 year) 
or equivalent combination of 
education and experience, in 
one of several limited fields: 
Computer Science/Apps, Eng 

Chem., Math, Physics or scien- 
tific or business related field. 
Salary: $67,000 per/yr, 40 
nrs/wk., 8:00-5:00 p.m. Please 
submit resumes to: Manager, 
Armstrong County Team PA 
CareerLink, 1270 North Water 
Street, PO Box 759, Kittanning 
PA 16201-0759. Reference: Job 
Order No. WEB 249349 


Programmer Analyst 
(18M Mainframe) - 
Multiple Openings 

Structured systems analysis. 

design, development, testing 
quality assurance, implementa- 
tion, integration, maintenance. 

support and conversion of large 
volume online transaction pro- 
cessing and batch application 
systems in a multi-hardware, 

muiti-software environment over 
centralized database systems 
using relationai/hierarchical/net- 
work database management 
systems, Third Generation Lan- 
guages (3GLs), Fourth Genera- 
tion Languages (4GLs), CASE 
tools and Transaction Process- 
ing Software. Bachelor's Degree 
(or equivalent) in Computer Sci- 
ence-Math/Engineering/Sci- 
ence/Business-Commerce and 
1 yr. experience in job offered or 
as Software Engineer/Systems 
Analyst are required. Must have 
appropriate combination of skills 
as follows: 1 of A and 1 of B and 
1 of C; or 1 of A and 2 of B; or 1 
of A and 2 of C. Ainciudes DB2 

IMS DB and IDMS DB; and B in- 
cludes CICS, IMS DC, IDMS DC 
ADS/O, QMF, VSAM and MF- 
Workbench; and C_ includes 
TELON, IEF, ADW, CSP and 
APS; High mobility preferred. 40 
hrs/week, 8 am - 5 pm. $66,829 
$78,000 per year. Qualified ap- 
plicants should contact or send 
resume to: Manager, Westmore- 
land County CareerLink, 300 
East Hillis Street, Youngwood 
PA 15697-1808. Refer to Job 
Order # WEB 249047 


information Technology 


Nexgenix, a leading supplier of a 
new category of internet profes- 
sional services called e-Rela- 
tionship solutions is seeking 
Technical Architects, Developers, 
Designers, Analysts, Project 
Managers, Software Engineers 
and Strategists in the following 
locations: CA, NC, NJ and 
Kansas City. Depending on the 
position, applicants must possess 
a Bachelor or Masters Degree 
and/or equivalent combination of 
education and/or experience 
and related skills. 


Resumes should be submitted 
with cover letter referencing Ad 
#CW602 and Job Title for which 
resume is submitted to: Don 
Loewe, 320 Commerce, Irvine, CA 
92602. APPLICATIONS SUB- 
MITTED WITHOUT REFER- 
ENCE TO AD #, JOB TITLE 
AND LOCATION WILL NOT BE 
ACCEPTED. EOE M/F/D/V 
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Data Ties 


suppliers that it expects them 
to implement data synchro- 
nization capabilities being of- 
fered by Uniform Code Coun- 
cil Inc. in Lawrenceville, N_J. 

Two top grocers, Ahold USA 
Inc. in Chantilly, Va. and 
Shaw’s Supermarkets Inc. in 
West Bridgewater, Mass., are 
also backing the effort. And 19 
other companies joined Wal- 
Mart, Ahold and Shaw’s in 
signing an open letter that calls 
for the universal adoption of 
standards being established by 
UCC and a product data syn- 
chronization hub set up by its 
UCCnet Inc. subsidiary. 

The goal is to lower costs for 
retailers and manufacturers 
alike by using UCCnet’s XML- 
based information registry to 
help reduce inventories and 
product shipment expenses. 
But officials involved in the ef- 


fort acknowledged that compa- | said. 


| to UCCnet’s 





| nies might have to make big IT 


changes in order to participate. 

Johan Sauer, global business 
development executive at on- 
line exchange Transora Inc. in 
Chicago, said there will be a 
dramatic increase in the 
amount of data that manufac- 
turers must provide to retail- 
ers. He likened the necessary 
IT work to the installation of a 
full-blown enterprise resource 
planning (ERP) system 

Procter & Gamble Co. and 
seven other manufacturers 
have started using Transora as 
a clearinghouse that collects 
their product data and sends it 
registry. Sauer 
said Transora had to combine 
nine different applications to 
build a data catalog and has set 
up a workflow of 35 separate 
steps to manage the data it 
shares with UCCnet. 

But all of that work might 
prove worthwhile in the long 
run, Sauer added. “What [UCC- 
net] did was kick us all in the 
butt and make us move,” he 
The development work 


Oracle, Dell, Red Hat Target 
Enterprise With Linux Bundle 


System . challenges 
Unix midrange turf 


BY TODD R. WEISS 
Linux may not yet be revolu- 
tionizing business IT, but its 
evolution continued last week 
when three vendors teamed up 
to announce a server/database 
bundle that runs on the open- 
source operating system. 
Oracle Corp., Dell Computer 
Corp. and Red Hat Ince. said 
they’re jointly developing and 
testing a system that combines 
Dell servers, the Oracle9i data- 
base and Red Hai’s Advanced 
Server Linux software. The 
out-of-the-box configuration is 


aimed at taking on Unix sys- | 


stage paid at Framingham, Mas: 





tems for corporate application 
uses, the companies said. 

For users, the Intel-based 
Linux bundle is being touted 
by the three vendors as an of- 
fering that equals the perfor- 
mance of Unix midrange sys- 
tems at a lower cost, said Dan 
Kusnetzky, an analyst at IDC in 
Framingham, Mass. 

“It’s not the end of the jour- 
ney, but it’s an important mile 
marker” in the progression of 
Linux into business comput- 
ing, Kusnetzky said. 

Bill Claybrook, an analyst at 
Aberdeen Group Ine. in 
Boston, said the alliance will 
help the three companies gain 
credibility as Linux continues 
to take hold with users. 
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What [UCC- 
net] did was 


kick us ali in the butt 
and make us move. 


JOHAN SAUER, 
TRANSORA INC 


was completed in February, 
and Transora now collects data 
on up to 230 attributes per 
product and converts it all into 
XML documents that are fed 
into UCCnet’s systems. 

Milan Turk Jr. director of 
customer e-business at P&G, 
said the new data synchroniza- 
tion capabilities are the culmi- 
nation of extensive in-house 


ERP, supply chain and applica- | 


tion integration work at P&G. 
“Our work plan for the past 


| couple of years has been build- 


ing [systems] so that we can be 
standards-compliant,” he said. 
P&G began passing limited 
amounts of data through Tran- 
sora to UCCnet in April, and 
Turk said the system should be 


Oracle database with Raleigh, 
N.C.-based Red Hat’s software 
using Dell hardware should of- 
fer a price/performance advan- 
tage compared with Unix sys- 
tems, Claybrook said. 


In most cases, Claybrook 


noted, users can buy four four- | 


way Dell servers running Ora- 
cle and Linux for less than a 12- 
way or 16-way RISC Unix sys- 
tem. “There’s a pretty hefty 
savings there,” he said. B 


ready for a full changeover lat- | 


| er this year. 


Sara Lee Corp.’s bakery divi- 
sion in St. Louis has also had to 
make big IT changes. To get its 
warehouse operation ready to 
take 
first had to add its frozen 
dough business to the unit’s 


SAP ERP system, said Martha 


Uhlhorn, executive vice presi- 
dent of e-commerce at Sara 
Lee Bakery Group. 
tion from the system will be 
sent via electronic data inter- 
change transmissions to Tran- 
sora and then on to UCCnet. 
The process also required 
some 
said. “SAP doesn’t have a field 


for all the information we need | 
to supply [to UCCnet], so we'll | 
send an auxiliary transmission | 


to fill in the other fields.” 


Multiple Hubs? 
The IT investment could be 
especially daunting for compa 


nies that “have not even begun | 


to electronically talk to their 
partners,” said Gene Alvarez, 


| an analyst at Meta Group Ine. | 


in Stamford, Conn. 


UCCnet also may not be the 


only data hub to which suppli- 
ers need to link their systems. 
Marco Carrillo, manager of 
business and technology at 
Chiquita Brands International 
Inc. in Cincinnati, said other 
grocers that have yet to sign on 
with UCCnet could require 
completely different data sub- 


missions. “The retail industry | 


does not have a clear vision of 
where it wants to go,” Carrillo 
said. “To be honest, I'd like to 
only integrate once.” 

About 100 companies have 
signed up to use the UCCnet 
registry, well below a goal of 
getting 600 subscribers by June 
1 that was set by its backers. But 
a UCCnet spokeswoman said 
there’s still time to get 600 
users online by year’s end. D 


UCCNET'S CAPABILITIES — 


For more details about the workings of the 
UCChet data registry, head to our Web site 
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Not all trading partners of retailers 
involved in the data synchroniza- 
tion effort will be forced to start 
using UCCnet's product data reg- 
istry this year. Suppliers of perish- 
able goods are being given until 
late next year to make the switch, 
and some IT managers said they 
need the extra time. 

“We have a proliferation of 
computer systems, and right now 
they are not able to work together 
in a way that could meet these re- 
quirements,” said Marco Carrillo, 
manager of business and technol- 
ogy at Chiquita Brands Interna- 
tional in Cincinnati. 

Carrillo said he’s thankful not to 
be on the front line for the UCCnet 
implementation, giving Chiquita 
time to complete a full review of its 
systems and business processes. 
“We can also learn from the others 
who went first,” he said. 

Martha Uhlhorn, executive vice 
president of e-commerce at Sara | 
Lee Bakery Group in St. Louis, said 
the baked goods part of its busi- 
ness ~ which accounts for 75% of 
sales - is nowhere near ready 
from an IT perspective. “I couldn't 
do it today if they put a gun to my 
head,” she said. 

While Sara Lee was able to pre- 
pare its smaller warehouse division 
to support the UCCnet proposal, 
Uhlhom said the baked-goods unit 
will require a completely different 
fix. That operation uses a set of 
homegrown applications instead 
of Sara Lee’s SAP-based enterprise 
resource planning system. 

“Nowhere in my legacy systems 
do | have all of that {UCCnet-re- 
quired] information in one spot,” 
Uhihorn said. Her long-term plan is 
to send baked-goods product data 
“in bits and pieces” to the Transo- 
ra online exchange, which will pool 
the data, pass the information on 
to UCCnet and send it back to 
Sara Lee as a single file. 

But first, Uhlhorn said, Sara Lee 
needs to set up a system that can 
store all the data. A budget and 
schedule for that project have yet 
to be determined, she added. 

~- Michael Meehan 
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en-Source Hot Air 


OOKS LIKE IT’LL BE A LONG, HOT SUMMER — at least 
when it comes to politics and open-source software. Last 
week, Ralph Nader sent a letter to the White House sug- 
gesting that the government use its purchasing power to 
keep Microsoft in line by adopting open-source software 
[QuickLink: 30404]. That was just after a Microsoft-funded think 
tank, the Alexis de Tocqueville Institution, announced the publica- 
tion of a white paper arguing that the government shouldn’t use 
open-source software because it would pose a national security risk. 


Competing masses of hot air in Washington 
are nothing new. Neither is government use of 
open-source software — that’s been steadily in- 
creasing, both in the U.S. and abroad. And that’s 
good news for corporate IT people, since it 
means somebody else is doing the work to eval- 
uate the software, so we don’t have to. 

It also puts pressure on Microsoft — which 
has lobbied furiously against federal use of 
open source — to close security holes, improve 
quality and cut better deals with customers. 
That’s the kind of leverage we’d like to have 
with any IT supplier. 

Trouble is, we’re not going to get any leverage 
from the most recent round of rhetoric. 

Consider Nader’s letter. It’s nominally a re- 
quest for information from the Office of Man- 
agement and Budget. (“Approximately how 
much money has the federal government spent 
each of the past seven years to license MS Win- 
dows for the client platforms?”) But the letter is 
really a proposal that the government use open 
source to pressure Microsoft. 

True, the government has done this before. 
That’s how a previous Seattle-based high-tech 
giant was broken up in 1934 into today’s United 
Air Lines Inc., The Boeing Co. and United Tech- 
nologies Corp. William Boeing’s 
United Aircraft and Transport 
Corp. wasn’t dismantled by an anti- 
trust lawsuit, but because the feder- 
al government refused to give air- 
mail business to a monopoly. 

But how likely is the Bush White 
House to apply that kind of pres- 
sure to Microsoft? Not very. The 
Nader letter isn’t a serious proposal 
— it’s just a lot of gas. And IT gets 
no leverage from that. 

The Tocqueville think tank’s 
pitch is even lamer — it suggests 
that using open source would “alter 





world’s senior news colum- 
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frank_hayes@computerworid.com. 


the very foundation of computer security” be- 
cause bad guys can see open-source software’s 
architecture and source code. 

Sure, but “security through obscurity” — just 
trying to hide that information — doesn’t work. 
And it isn’t necessary. For example, bad guys 
can also see the details of the most successful 
encryption algorithms, but that doesn’t make 
crypto easier to crack. And though the source 
code for commercial software isn’t available, 
hackers and terrorists can buy exactly the same 
product a government agency uses, then experi- 
ment to find security holes at their leisure. 

But with open source, government IT shops 
can patch, customize and recompile at will. 
(And don’t kid yourself — any patches the gov- 
ernment deems secret won’t go into the public 
domain, GNU license or no.) That kind of flexi- 
bility explains why Mitre Corp., which has ana- 
lyzed computer security for the Defense De- 
partment since Bill Gates was still in short 
pants, recommended last month that the Penta- 
gon keep using open source for lower costs and 
improved security. 

From the Tocqueville think tank, we got no 
real security analysis — just more gas. These 
guys and Ralph Nader deserve each other. 

There is a serious debate under 
way on the virtues and shortcom- 
ings of open source. It looks like we 
just won't hear any of it in Washing- 
ton this summer. 

Maybe it seems obvious, but as 
the rhetoric heats up, it’s worth say- 
ing again: The real question about 
open-source software — or any IT 
system — isn’t who makes it, or 
how. The question is whether it can 
do the job you need it to do, with 
the effectiveness, security, reliability 
and support you require. 

The rest is just hot air. D 





THERE’S a dark stain on the 
week-old desk when support 
pilot fish arrives to replace a de- 
fective mouse. And the defect? 
The body is black, and the cord 
has been melted off. User con- 
fesses she tried to cover the un- 
pleasant new-desk smell with a 
scented candle - which set her 
reports on fire and torched the 
mouse, too. “I told the auditor 
the problem was a hot user,” 
fish says. “He didn’t buy it.” 


SCHOOL principal tells IT pilot 
fish that all his school’s mice 
need replacing “because they no 
longer move properly.” Maybe 
they just need a good cleaning, 
fish says. “That's not possible,” 
says principal. Fearing students 
would remove the mouse balls, 
he had glued shut all 250 brand- 
new mice. “He insisted this 
should be covered under warran- 
ty,” says fish. “Yeah, right.” 


HMO STAFFER calls the help 
desk - her mouse has died 


COMPUTERWORLD June 10, 2002 


: 


again. “] brought another new 
mouse to her workstation,” sighs 
long-suffering pilot fish, “and 
explained one more time that 
you do not plug in the mouse 
with a twisting motion.” 


PC ON THIS plant floor gets 
flaky, so IT pilot fish swaps it out 
to diagnose the problem. “It was 
on the same table as the coffee 
pot, along with the sugar and 
cream,” fish says. “Inside the PC, 
there was sugar everywhere - 
the CPU was covered in melted 
sugar.” And he finds the nest of 
a mouse - the live kind - that 
dragged all those sugar packets 
in through an uncovered slot on 
the back of the PC. 


Click on this one: sharky@ 
computerworld.com. You 
score a sharp Shark shirt if we 
use your true tale of IT life. And 
check out the daily feed, browse 
the Sharkives and sign up for 
Shark Tank home delivery at 
computerworld.com/sharky. 


The 5th Wave 


“Well thats typical. Ever since I started 

teleconferencing with my payents, my 

mother keeps looking for a toolbar 

function that brushes the hair off 
my forehead . 
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Oracle9z JDeveloper 
Web Services 


“Oracle9z JDeveloper isn’t just a “Oracle9i JDeveloper: 
Java coding tool; it’s intended to 


An alternative to .NET.” 
act as an on-ramp to the Web aE 


services journey.” TMT 
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“While Oracle97 aims to satisfy a 

number of scenarios, the new “JDeveloper marks the start of a 
JDeveloper release strongly new push for Oracle... Oracle is 
supports Oracle’s larger strategic well positioned to provide a stack 


course toward Web services.” for Web services. 


intelligent, i.. © InfoWorld 
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